mirror of
https://github.com/firebase/firebase-ios-sdk
synced 2026-11-10 22:45:59 +05:45
* App Attest provider: attestation sequence (#7971)
* App Attest provider: attestation sequence (#761)
* App Attest draft WIP
* FIRAppAttestProvider initializers
* ./scripts/style.sh
* FIRAppAttestProvider implementation draft
* Basic FIRAppAttestProviderTests and fixes
* style
* testGetTokenWhenAppAttestIsNotSupported
* More FIRAppAttestProviderTests
* Cleanup
* Remove unused file
* Availability annotations on DCAppAttestService category.
* Guard FIRAppAttestProvider with #if TARGET_OS_IOS
* Formatting
* Fix SPM
* app_check.yaml: Add diagnostics SPM builds
* fix yaml
* Fix Firebase-Package scheme bad merge
* Fix typo
* FIRAppAttestProvider: hide default init
* FIRAppAttestKeyIDStorage: methods placeholders
* Comments
* Fix updated block definition
* Implement app attest key ID storage (#8014)
* Implement FIRAppAttestKeyIDStorage
* Add FIRAppAttestKeyIDStorageTests
* Review [Draft]
* Style
* Docs updates
* Docs updates 2
* Review [Draft] 2
* Improve tests
* Improve test readability
* Improve test readability 2
* App Check App Attest workflow updates: initial handshake (#8032)
* Handshake adjustments (WIP)
* Introduce FIRAppAttestProviderState
* WIP: calculate attestation state
* WIP: calculate attestation state 2
* formatting
* Comments and moving code around
* Fix init in tests
* Fix state calculation flow
* Cleanup state calculation and fix tests.
* Cleanup and fixes.
* Comments
* formatting
* Fix import
* Typo fixes and additional comments
* FIRAppAttestInitialHandshakeResponse API
* Cleanup state calculation using FBLPromiseAwait
* Cleanup
* style
* FIRAppAttestArtifactStorage implementation and tests (#8041)
* Update comments
* FIRAppAttestArtifactStorage implementation and tests
* Fix init
* API docs
* Clean up storage in tests
* Comments
* Disable Keychain dependent tests for SPM
* Implement App Attest `getRandomChallenge` (#8033)
* Initial implementation
* Parse response body for challenge and stub test cases
* Review [Draft]
* Avoid encoding challenge again
* Add tests
* Revert "Avoid encoding challenge again" and add TODO
This reverts commit 69eb00dfe2.
* Document tests; Add test
* Tests: Add URL validation check
* Review
* Define Exchange AppAttest Assertion for FAC token API (#8058)
* App Check App Attest: attestation request (#8059)
* App Attest provider API integration WIP
* update tests
* Draft attestation response parsing
* Attestation request draft
* style
* AppAttest Attestation API tests draft
* Error cases tests
* style
* Cleanup and API docs
* Merge fix
* Fix OCMock imports
* Fix nullability modifier
* Formatting
* comments
* App Check App Attest initial handshake adjustments (#8067)
* calculatre sha256 of random challenge for attestation
* Test app adjustments
* cleanup
* use trailing closures in the test app
* Implement API for ExchangeAppAttestAssertionRequest endpoint (#8065)
* Implement assertion exchange
* Tweak existing tests
* Add tests
* Rename JSON to better match gRPC message
* Add HTTPBody helper
* Review
* Review 2
* Review 3
* App Check App Attest assertion flow (#8083)
* App Attest assertion workflow draft
* send request
* assertion flow tests
* style
* App Check: store App Attest artifact per key ID (#8097)
* Update artifact storage API and tests
* Artifact storage implementation update
* Save artifact for a key ID
* Style
* typos
* App Check: prevent concurrent token requests (#8117)
* App Attest multiple get token method invocation tests
* Ensure a single App Attest handshake sequence at the time
* FIRAppCheckTests: get token request merging tests
* FIRAppCheck: Ensure a single get token operation at the time
* formatting
* Test new request after merged requests
* Release finished operation promise
* Style
* Typos
* typo
* Request merging tests for error cases
* formatting
* Changelog
* App Check App Attest: handle attestation rejection (#8170)
* Remove/update outdated TODOs
* [WIP] Attestation rejection handling draft
* style
* retry tests draft
* reset key ID before retry
* Reset attestation
* test error and fixes
* style
* More details in the name
* Some debug logging
* style
* Use specific codes for log messages
* style
* Add FIRAppAttestProvider.h the umbrella header
* Add receivedAtDate property to the FAC token
* Update tests to check receivedAtDate field where important
* [WIP] Use FIRAppCheckTokenRefreshResult instead in the refresher API
* [WIP] Fix refgresher usage
* Update tests with new API, keep old logic
* Update tests with new logic
* WIP
* WIP
* Initial refresh tests and fixes.
* Add #import <TargetConditionals.h> where needed.
* Formatting
* Cleanup and test updates
* style
* Comments
* Cleanup and comments
* Fix catalyst
* Changelog
* Changelog version fix
* Typo
* Cleanup
* Typo
* Imports order
Co-authored-by: Nick Cooke <36927374+ncooke3@users.noreply.github.com>
183 lines
6.9 KiB
Objective-C
183 lines
6.9 KiB
Objective-C
/*
|
|
* Copyright 2020 Google LLC
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
#import <XCTest/XCTest.h>
|
|
|
|
#import <OCMock/OCMock.h>
|
|
#import "FBLPromise+Testing.h"
|
|
|
|
#import "FirebaseAppCheck/Sources/Core/FIRAppCheckToken+Internal.h"
|
|
#import "FirebaseAppCheck/Sources/DebugProvider/API/FIRAppCheckDebugProviderAPIService.h"
|
|
#import "FirebaseAppCheck/Sources/Public/FirebaseAppCheck/FIRAppCheckDebugProvider.h"
|
|
|
|
#import "FirebaseCore/Sources/Private/FirebaseCoreInternal.h"
|
|
|
|
static NSString *const kDebugTokenEnvKey = @"FIRAAppCheckDebugToken";
|
|
static NSString *const kDebugTokenUserDefaultsKey = @"FIRAAppCheckDebugToken";
|
|
|
|
@interface FIRAppCheckDebugProvider (Tests)
|
|
|
|
- (instancetype)initWithAPIService:(id<FIRAppCheckDebugProviderAPIServiceProtocol>)APIService;
|
|
|
|
@end
|
|
|
|
@interface FIRAppCheckDebugProviderTests : XCTestCase
|
|
|
|
@property(nonatomic) FIRAppCheckDebugProvider *provider;
|
|
@property(nonatomic) id processInfoMock;
|
|
@property(nonatomic) id fakeAPIService;
|
|
|
|
@end
|
|
|
|
typedef void (^FIRAppCheckTokenValidationBlock)(FIRAppCheckToken *_Nullable token,
|
|
NSError *_Nullable error);
|
|
|
|
@implementation FIRAppCheckDebugProviderTests
|
|
|
|
- (void)setUp {
|
|
self.processInfoMock = OCMPartialMock([NSProcessInfo processInfo]);
|
|
|
|
self.fakeAPIService = OCMProtocolMock(@protocol(FIRAppCheckDebugProviderAPIServiceProtocol));
|
|
self.provider = [[FIRAppCheckDebugProvider alloc] initWithAPIService:self.fakeAPIService];
|
|
}
|
|
|
|
- (void)tearDown {
|
|
self.provider = nil;
|
|
[self.processInfoMock stopMocking];
|
|
self.processInfoMock = nil;
|
|
[[NSUserDefaults standardUserDefaults] removeObjectForKey:kDebugTokenUserDefaultsKey];
|
|
}
|
|
|
|
#pragma mark - Initialization
|
|
|
|
- (void)testInitWithValidApp {
|
|
FIROptions *options = [[FIROptions alloc] initWithGoogleAppID:@"app_id" GCMSenderID:@"sender_id"];
|
|
options.APIKey = @"api_key";
|
|
options.projectID = @"project_id";
|
|
FIRApp *app = [[FIRApp alloc] initInstanceWithName:@"testInitWithValidApp" options:options];
|
|
|
|
XCTAssertNotNil([[FIRAppCheckDebugProvider alloc] initWithApp:app]);
|
|
}
|
|
|
|
- (void)testInitWithIncompleteApp {
|
|
FIROptions *options = [[FIROptions alloc] initWithGoogleAppID:@"app_id" GCMSenderID:@"sender_id"];
|
|
|
|
options.projectID = @"project_id";
|
|
FIRApp *missingAPIKeyApp = [[FIRApp alloc] initInstanceWithName:@"testInitWithValidApp"
|
|
options:options];
|
|
XCTAssertNil([[FIRAppCheckDebugProvider alloc] initWithApp:missingAPIKeyApp]);
|
|
|
|
options.projectID = nil;
|
|
options.APIKey = @"api_key";
|
|
FIRApp *missingProjectIDApp = [[FIRApp alloc] initInstanceWithName:@"testInitWithValidApp"
|
|
options:options];
|
|
XCTAssertNil([[FIRAppCheckDebugProvider alloc] initWithApp:missingProjectIDApp]);
|
|
}
|
|
|
|
#pragma mark - Debug token generating/storing
|
|
|
|
- (void)testCurrentTokenWhenEnvironmentVariableSetAndTokenStored {
|
|
[[NSUserDefaults standardUserDefaults] setObject:@"stored token"
|
|
forKey:kDebugTokenUserDefaultsKey];
|
|
NSString *envToken = @"env token";
|
|
OCMStub([self.processInfoMock processInfo]).andReturn(self.processInfoMock);
|
|
OCMExpect([self.processInfoMock environment]).andReturn(@{kDebugTokenEnvKey : envToken});
|
|
|
|
XCTAssertEqualObjects([self.provider currentDebugToken], envToken);
|
|
}
|
|
|
|
- (void)testCurrentTokenWhenNoEnvironmentVariableAndTokenStored {
|
|
NSString *storedToken = @"stored token";
|
|
[[NSUserDefaults standardUserDefaults] setObject:storedToken forKey:kDebugTokenUserDefaultsKey];
|
|
|
|
XCTAssertNil(NSProcessInfo.processInfo.environment[kDebugTokenEnvKey]);
|
|
|
|
XCTAssertEqualObjects([self.provider currentDebugToken], storedToken);
|
|
}
|
|
|
|
- (void)testCurrentTokenWhenNoEnvironmentVariableAndNoTokenStored {
|
|
XCTAssertNil(NSProcessInfo.processInfo.environment[kDebugTokenEnvKey]);
|
|
XCTAssertNil([[NSUserDefaults standardUserDefaults] stringForKey:kDebugTokenUserDefaultsKey]);
|
|
|
|
NSString *generatedToken = [self.provider currentDebugToken];
|
|
XCTAssertNotNil(generatedToken);
|
|
|
|
// Check if the generated token is stored to the user defaults.
|
|
XCTAssertEqualObjects(
|
|
[[NSUserDefaults standardUserDefaults] stringForKey:kDebugTokenUserDefaultsKey],
|
|
generatedToken);
|
|
|
|
// Check if the same token is used once generated.
|
|
XCTAssertEqualObjects([self.provider currentDebugToken], generatedToken);
|
|
}
|
|
|
|
#pragma mark - Debug token to FAC token exchange
|
|
|
|
- (void)testGetTokenSuccess {
|
|
// 1. Stub API service.
|
|
NSString *expectedDebugToken = [self.provider currentDebugToken];
|
|
FIRAppCheckToken *validToken = [[FIRAppCheckToken alloc] initWithToken:@"valid_token"
|
|
expirationDate:[NSDate date]
|
|
receivedAtDate:[NSDate date]];
|
|
OCMExpect([self.fakeAPIService appCheckTokenWithDebugToken:expectedDebugToken])
|
|
.andReturn([FBLPromise resolvedWith:validToken]);
|
|
|
|
// 2. Validate get token.
|
|
[self validateGetToken:^(FIRAppCheckToken *_Nullable token, NSError *_Nullable error) {
|
|
XCTAssertNil(error);
|
|
XCTAssertEqualObjects(token.token, validToken.token);
|
|
XCTAssertEqualObjects(token.expirationDate, validToken.expirationDate);
|
|
XCTAssertEqualObjects(token.receivedAtDate, validToken.receivedAtDate);
|
|
}];
|
|
|
|
// 3. Verify fakes.
|
|
OCMVerifyAll(self.fakeAPIService);
|
|
}
|
|
|
|
- (void)testGetTokenAPIError {
|
|
// 1. Stub API service.
|
|
NSString *expectedDebugToken = [self.provider currentDebugToken];
|
|
NSError *APIError = [NSError errorWithDomain:@"testGetTokenAPIError" code:-1 userInfo:nil];
|
|
FBLPromise *rejectedPromise = [FBLPromise pendingPromise];
|
|
[rejectedPromise reject:APIError];
|
|
OCMExpect([self.fakeAPIService appCheckTokenWithDebugToken:expectedDebugToken])
|
|
.andReturn(rejectedPromise);
|
|
|
|
// 2. Validate get token.
|
|
[self validateGetToken:^(FIRAppCheckToken *_Nullable token, NSError *_Nullable error) {
|
|
XCTAssertEqualObjects(error, APIError);
|
|
XCTAssertNil(token);
|
|
}];
|
|
|
|
// 3. Verify fakes.
|
|
OCMVerifyAll(self.fakeAPIService);
|
|
}
|
|
|
|
#pragma mark - Helpers
|
|
|
|
- (void)validateGetToken:(FIRAppCheckTokenValidationBlock)validationBlock {
|
|
XCTestExpectation *expectation = [self expectationWithDescription:@"getToken"];
|
|
[self.provider
|
|
getTokenWithCompletion:^(FIRAppCheckToken *_Nullable token, NSError *_Nullable error) {
|
|
validationBlock(token, error);
|
|
[expectation fulfill];
|
|
}];
|
|
|
|
[self waitForExpectations:@[ expectation ] timeout:0.5];
|
|
}
|
|
|
|
@end
|