test_user_password.rb

require 'al-test-utils'

class TestUserPassword < Test::Unit::TestCase
  priority :must

  priority :normal
  def test_valid?
    plain_password = "password"
    %w(crypt md5 smd5 sha ssha).each do |type|
      hashed_password = ActiveLdap::UserPassword.send(type, plain_password)
      assert_send([ActiveLdap::UserPassword, :valid?,
                   plain_password, hashed_password])
    end
  end

  def test_crypt
    salt = ".WoUoU9f3IlUx9Hh7D/8y.xA6ziklGib"
    assert_equal("{CRYPT}.W57FZhV52w0s",
                 ActiveLdap::UserPassword.crypt("password", salt))

    password = "PASSWORD"
    hashed_password = ActiveLdap::UserPassword.crypt(password)
    salt = hashed_password.sub(/^\{CRYPT\}/, '')
    assert_equal(hashed_password,
                 ActiveLdap::UserPassword.crypt(password, salt))
  end

  def test_extract_salt_for_crypt
    assert_extract_salt(:crypt, "AB", "ABCDE")
    assert_extract_salt(:crypt, "$1", "$1")
    assert_extract_salt(:crypt, "$1$$", "$1$")
    assert_extract_salt(:crypt, "$1$$", "$1$$")
    assert_extract_salt(:crypt, "$1$abcdefgh$", "$1$abcdefgh$")
    assert_extract_salt(:crypt, "$1$abcdefgh$", "$1$abcdefghi$")
  end

  def test_md5
    assert_equal("{MD5}X03MO1qnZdYdgyfeuILPmQ==",
                 ActiveLdap::UserPassword.md5("password"))
  end

  def test_smd5
    assert_equal("{SMD5}gjz+SUSfZaux99Xsji/No200cGI=",
                 ActiveLdap::UserPassword.smd5("password", "m4pb"))

    password = "PASSWORD"
    hashed_password = ActiveLdap::UserPassword.smd5(password)
    salt = decode64(hashed_password.sub(/^\{SMD5\}/, ''))[-4, 4]
    assert_equal(hashed_password,
                 ActiveLdap::UserPassword.smd5(password, salt))
  end

  def test_extract_salt_for_smd5
    assert_extract_salt(:smd5, nil, encode64(""))
    assert_extract_salt(:smd5, nil, encode64("1"))
    assert_extract_salt(:smd5, nil, encode64("12"))
    assert_extract_salt(:smd5, nil, encode64("123"))
    assert_extract_salt(:smd5, "ABCD", encode64("ABCD"))
    assert_extract_salt(:smd5, "BCDE", encode64("ABCDE"))
  end

  def test_sha
    assert_equal("{SHA}W6ph5Mm5Pz8GgiULbPgzG37mj9g=",
                 ActiveLdap::UserPassword.sha("password"))
  end

  def test_ssha
    assert_equal("{SSHA}ipnlCLA1HaK3mm3hyneJIp+Px2h1RGk3",
                 ActiveLdap::UserPassword.ssha("password", "uDi7"))

    password = "PASSWORD"
    hashed_password = ActiveLdap::UserPassword.ssha(password)
    salt = decode64(hashed_password.sub(/^\{SSHA\}/, ''))[-4, 4]
    assert_equal(hashed_password,
                 ActiveLdap::UserPassword.ssha(password, salt))
  end

  def test_extract_salt_for_ssha
    assert_extract_salt(:ssha, nil, encode64(""))
    assert_extract_salt(:ssha, nil, encode64("1"))
    assert_extract_salt(:ssha, nil, encode64("12"))
    assert_extract_salt(:ssha, nil, encode64("123"))
    assert_extract_salt(:ssha, "ABCD", encode64("ABCD"))
    assert_extract_salt(:ssha, "BCDE", encode64("ABCDE"))
  end

  private
  def assert_extract_salt(type, expected, hashed_password)
    actual = ActiveLdap::UserPassword.send("extract_salt_for_#{type}",
                                           hashed_password)
    assert_equal(expected, actual)
  end

  def encode64(string)
    [string].pack('m').chomp
  end

  def decode64(string)
    string.unpack('m')[0]
  end
end