Files
firebase-ios-sdk/FirebaseAppCheck/Tests/Unit/DebugProvider/FIRAppCheckDebugProviderTests.m
T
Maksym MalyhinandNick Cooke 2ec4dbdae4 App Check: optimize auto-refresh (#8232)
* App Attest provider: attestation sequence (#7971)

* App Attest provider: attestation sequence (#761)

* App Attest draft WIP

* FIRAppAttestProvider initializers

* ./scripts/style.sh

* FIRAppAttestProvider implementation draft

* Basic FIRAppAttestProviderTests and fixes

* style

* testGetTokenWhenAppAttestIsNotSupported

* More FIRAppAttestProviderTests

* Cleanup

* Remove unused file

* Availability annotations on DCAppAttestService category.

* Guard FIRAppAttestProvider with #if TARGET_OS_IOS

* Formatting

* Fix SPM

* app_check.yaml: Add diagnostics SPM builds

* fix yaml

* Fix Firebase-Package scheme bad merge

* Fix typo

* FIRAppAttestProvider: hide default init

* FIRAppAttestKeyIDStorage: methods placeholders

* Comments

* Fix updated block definition

* Implement app attest key ID storage (#8014)

* Implement FIRAppAttestKeyIDStorage

* Add FIRAppAttestKeyIDStorageTests

* Review [Draft]

* Style

* Docs updates

* Docs updates 2

* Review [Draft] 2

* Improve tests

* Improve test readability

* Improve test readability 2

* App Check App Attest workflow updates: initial handshake (#8032)

* Handshake adjustments (WIP)

* Introduce FIRAppAttestProviderState

* WIP: calculate attestation state

* WIP: calculate attestation state 2

* formatting

* Comments and moving code around

* Fix init in tests

* Fix state calculation flow

* Cleanup state calculation and fix tests.

* Cleanup and fixes.

* Comments

* formatting

* Fix import

* Typo fixes and additional comments

* FIRAppAttestInitialHandshakeResponse API

* Cleanup state calculation using FBLPromiseAwait

* Cleanup

* style

* FIRAppAttestArtifactStorage implementation and tests (#8041)

* Update comments

* FIRAppAttestArtifactStorage implementation and tests

* Fix init

* API docs

* Clean up storage in tests

* Comments

* Disable Keychain dependent tests for SPM

* Implement App Attest `getRandomChallenge` (#8033)

* Initial implementation

* Parse response body for challenge and stub test cases

* Review [Draft]

* Avoid encoding challenge again

* Add tests

* Revert "Avoid encoding challenge again" and add TODO

This reverts commit 69eb00dfe2.

* Document tests; Add test

* Tests: Add URL validation check

* Review

* Define Exchange AppAttest Assertion for FAC token API (#8058)

* App Check App Attest: attestation request (#8059)

* App Attest provider API integration WIP

* update tests

* Draft attestation response parsing

* Attestation request draft

* style

* AppAttest Attestation API tests draft

* Error cases tests

* style

* Cleanup and API docs

* Merge fix

* Fix OCMock imports

* Fix nullability modifier

* Formatting

* comments

* App Check App Attest initial handshake adjustments (#8067)

* calculatre sha256 of random challenge for attestation

* Test app adjustments

* cleanup

* use trailing closures in the test app

* Implement API for ExchangeAppAttestAssertionRequest endpoint (#8065)

* Implement assertion exchange

* Tweak existing tests

* Add tests

* Rename JSON to better match gRPC  message

* Add HTTPBody helper

* Review

* Review 2

* Review 3

* App Check App Attest assertion flow (#8083)

* App Attest assertion workflow draft

* send request

* assertion flow tests

* style

* App Check: store App Attest artifact per key ID (#8097)

* Update artifact storage API and tests

* Artifact storage implementation update

* Save artifact for a key ID

* Style

* typos

* App Check: prevent concurrent token requests (#8117)

* App Attest multiple get token method invocation tests

* Ensure a single App Attest handshake sequence at the time

* FIRAppCheckTests: get token request merging tests

* FIRAppCheck: Ensure a single get token operation at the time

* formatting

* Test new request after merged requests

* Release finished operation promise

* Style

* Typos

* typo

* Request merging tests for error cases

* formatting

* Changelog

* App Check App Attest: handle attestation rejection (#8170)

* Remove/update outdated TODOs

* [WIP] Attestation rejection handling draft

* style

* retry tests draft

* reset key ID before retry

* Reset attestation

* test error and fixes

* style

* More details in the name

* Some debug logging

* style

* Use specific codes for log messages

* style

* Add FIRAppAttestProvider.h the umbrella header

* Add receivedAtDate property to the FAC token

* Update tests to check receivedAtDate field where important

* [WIP] Use FIRAppCheckTokenRefreshResult instead in the refresher API

* [WIP] Fix refgresher usage

* Update tests with new API, keep old logic

* Update tests with new logic

* WIP

* WIP

* Initial refresh tests and fixes.

* Add #import <TargetConditionals.h> where needed.

* Formatting

* Cleanup and test updates

* style

* Comments

* Cleanup and comments

* Fix catalyst

* Changelog

* Changelog version fix

* Typo

* Cleanup

* Typo

* Imports order

Co-authored-by: Nick Cooke <36927374+ncooke3@users.noreply.github.com>
2021-06-11 17:35:37 -04:00

183 lines
6.9 KiB
Objective-C

/*
* Copyright 2020 Google LLC
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
#import <XCTest/XCTest.h>
#import <OCMock/OCMock.h>
#import "FBLPromise+Testing.h"
#import "FirebaseAppCheck/Sources/Core/FIRAppCheckToken+Internal.h"
#import "FirebaseAppCheck/Sources/DebugProvider/API/FIRAppCheckDebugProviderAPIService.h"
#import "FirebaseAppCheck/Sources/Public/FirebaseAppCheck/FIRAppCheckDebugProvider.h"
#import "FirebaseCore/Sources/Private/FirebaseCoreInternal.h"
static NSString *const kDebugTokenEnvKey = @"FIRAAppCheckDebugToken";
static NSString *const kDebugTokenUserDefaultsKey = @"FIRAAppCheckDebugToken";
@interface FIRAppCheckDebugProvider (Tests)
- (instancetype)initWithAPIService:(id<FIRAppCheckDebugProviderAPIServiceProtocol>)APIService;
@end
@interface FIRAppCheckDebugProviderTests : XCTestCase
@property(nonatomic) FIRAppCheckDebugProvider *provider;
@property(nonatomic) id processInfoMock;
@property(nonatomic) id fakeAPIService;
@end
typedef void (^FIRAppCheckTokenValidationBlock)(FIRAppCheckToken *_Nullable token,
NSError *_Nullable error);
@implementation FIRAppCheckDebugProviderTests
- (void)setUp {
self.processInfoMock = OCMPartialMock([NSProcessInfo processInfo]);
self.fakeAPIService = OCMProtocolMock(@protocol(FIRAppCheckDebugProviderAPIServiceProtocol));
self.provider = [[FIRAppCheckDebugProvider alloc] initWithAPIService:self.fakeAPIService];
}
- (void)tearDown {
self.provider = nil;
[self.processInfoMock stopMocking];
self.processInfoMock = nil;
[[NSUserDefaults standardUserDefaults] removeObjectForKey:kDebugTokenUserDefaultsKey];
}
#pragma mark - Initialization
- (void)testInitWithValidApp {
FIROptions *options = [[FIROptions alloc] initWithGoogleAppID:@"app_id" GCMSenderID:@"sender_id"];
options.APIKey = @"api_key";
options.projectID = @"project_id";
FIRApp *app = [[FIRApp alloc] initInstanceWithName:@"testInitWithValidApp" options:options];
XCTAssertNotNil([[FIRAppCheckDebugProvider alloc] initWithApp:app]);
}
- (void)testInitWithIncompleteApp {
FIROptions *options = [[FIROptions alloc] initWithGoogleAppID:@"app_id" GCMSenderID:@"sender_id"];
options.projectID = @"project_id";
FIRApp *missingAPIKeyApp = [[FIRApp alloc] initInstanceWithName:@"testInitWithValidApp"
options:options];
XCTAssertNil([[FIRAppCheckDebugProvider alloc] initWithApp:missingAPIKeyApp]);
options.projectID = nil;
options.APIKey = @"api_key";
FIRApp *missingProjectIDApp = [[FIRApp alloc] initInstanceWithName:@"testInitWithValidApp"
options:options];
XCTAssertNil([[FIRAppCheckDebugProvider alloc] initWithApp:missingProjectIDApp]);
}
#pragma mark - Debug token generating/storing
- (void)testCurrentTokenWhenEnvironmentVariableSetAndTokenStored {
[[NSUserDefaults standardUserDefaults] setObject:@"stored token"
forKey:kDebugTokenUserDefaultsKey];
NSString *envToken = @"env token";
OCMStub([self.processInfoMock processInfo]).andReturn(self.processInfoMock);
OCMExpect([self.processInfoMock environment]).andReturn(@{kDebugTokenEnvKey : envToken});
XCTAssertEqualObjects([self.provider currentDebugToken], envToken);
}
- (void)testCurrentTokenWhenNoEnvironmentVariableAndTokenStored {
NSString *storedToken = @"stored token";
[[NSUserDefaults standardUserDefaults] setObject:storedToken forKey:kDebugTokenUserDefaultsKey];
XCTAssertNil(NSProcessInfo.processInfo.environment[kDebugTokenEnvKey]);
XCTAssertEqualObjects([self.provider currentDebugToken], storedToken);
}
- (void)testCurrentTokenWhenNoEnvironmentVariableAndNoTokenStored {
XCTAssertNil(NSProcessInfo.processInfo.environment[kDebugTokenEnvKey]);
XCTAssertNil([[NSUserDefaults standardUserDefaults] stringForKey:kDebugTokenUserDefaultsKey]);
NSString *generatedToken = [self.provider currentDebugToken];
XCTAssertNotNil(generatedToken);
// Check if the generated token is stored to the user defaults.
XCTAssertEqualObjects(
[[NSUserDefaults standardUserDefaults] stringForKey:kDebugTokenUserDefaultsKey],
generatedToken);
// Check if the same token is used once generated.
XCTAssertEqualObjects([self.provider currentDebugToken], generatedToken);
}
#pragma mark - Debug token to FAC token exchange
- (void)testGetTokenSuccess {
// 1. Stub API service.
NSString *expectedDebugToken = [self.provider currentDebugToken];
FIRAppCheckToken *validToken = [[FIRAppCheckToken alloc] initWithToken:@"valid_token"
expirationDate:[NSDate date]
receivedAtDate:[NSDate date]];
OCMExpect([self.fakeAPIService appCheckTokenWithDebugToken:expectedDebugToken])
.andReturn([FBLPromise resolvedWith:validToken]);
// 2. Validate get token.
[self validateGetToken:^(FIRAppCheckToken *_Nullable token, NSError *_Nullable error) {
XCTAssertNil(error);
XCTAssertEqualObjects(token.token, validToken.token);
XCTAssertEqualObjects(token.expirationDate, validToken.expirationDate);
XCTAssertEqualObjects(token.receivedAtDate, validToken.receivedAtDate);
}];
// 3. Verify fakes.
OCMVerifyAll(self.fakeAPIService);
}
- (void)testGetTokenAPIError {
// 1. Stub API service.
NSString *expectedDebugToken = [self.provider currentDebugToken];
NSError *APIError = [NSError errorWithDomain:@"testGetTokenAPIError" code:-1 userInfo:nil];
FBLPromise *rejectedPromise = [FBLPromise pendingPromise];
[rejectedPromise reject:APIError];
OCMExpect([self.fakeAPIService appCheckTokenWithDebugToken:expectedDebugToken])
.andReturn(rejectedPromise);
// 2. Validate get token.
[self validateGetToken:^(FIRAppCheckToken *_Nullable token, NSError *_Nullable error) {
XCTAssertEqualObjects(error, APIError);
XCTAssertNil(token);
}];
// 3. Verify fakes.
OCMVerifyAll(self.fakeAPIService);
}
#pragma mark - Helpers
- (void)validateGetToken:(FIRAppCheckTokenValidationBlock)validationBlock {
XCTestExpectation *expectation = [self expectationWithDescription:@"getToken"];
[self.provider
getTokenWithCompletion:^(FIRAppCheckToken *_Nullable token, NSError *_Nullable error) {
validationBlock(token, error);
[expectation fulfill];
}];
[self waitForExpectations:@[ expectation ] timeout:0.5];
}
@end