271 lines
10 KiB
Swift
271 lines
10 KiB
Swift
//
|
|
// Copyright 2022 Signal Messenger, LLC
|
|
// SPDX-License-Identifier: AGPL-3.0-only
|
|
//
|
|
|
|
import XCTest
|
|
import SignalServiceKit
|
|
|
|
class OWSRequestFactoryTest: SSKBaseTestSwift {
|
|
private func getUdAccessKey() throws -> SMKUDAccessKey {
|
|
let profileKey = Data(count: Int(kAES256_KeyByteLength))
|
|
let result = try? SMKUDAccessKey(profileKey: profileKey)
|
|
return try XCTUnwrap(result)
|
|
}
|
|
|
|
private func queryItemsAsDictionary(url: URL) throws -> [String: String] {
|
|
let urlComponents = try XCTUnwrap(URLComponents(url: url, resolvingAgainstBaseURL: false), "URL components")
|
|
let queryItems = urlComponents.queryItems ?? []
|
|
var result = [String: String]()
|
|
for queryItem in queryItems {
|
|
XCTAssertNil(result[queryItem.name], "Duplicate query item \(queryItem.name)")
|
|
result[queryItem.name] = queryItem.value
|
|
}
|
|
return result
|
|
}
|
|
|
|
// MARK: - Account
|
|
|
|
func testRequestPreauthChallenge() {
|
|
let request = OWSRequestFactory.deprecated_requestPreauthChallenge(
|
|
e164: "+19875550165",
|
|
pushToken: "foo bar",
|
|
isVoipToken: true
|
|
)
|
|
|
|
XCTAssertEqual(
|
|
request.url?.relativeString,
|
|
"v1/accounts/apn/preauth/foo%20bar/+19875550165?voip=true"
|
|
)
|
|
XCTAssertEqual(request.httpMethod, "GET")
|
|
XCTAssertFalse(request.shouldHaveAuthorizationHeaders)
|
|
}
|
|
|
|
func testEnable2FARequestWithPin() {
|
|
let request = OWSRequestFactory.enable2FARequest(withPin: "90210")
|
|
|
|
XCTAssertEqual(request.url?.path, "v1/accounts/pin")
|
|
XCTAssertEqual(request.httpMethod, "PUT")
|
|
XCTAssertEqual(request.parameters as! [String: String], ["pin": "90210"])
|
|
XCTAssertTrue(request.shouldHaveAuthorizationHeaders)
|
|
}
|
|
|
|
// MARK: - Devices
|
|
|
|
func testDeviceProvisioning() {
|
|
let request = OWSRequestFactory.provisionDevice(
|
|
withMessageBody: .init([1, 2, 3]),
|
|
ephemeralDeviceId: "foo bar"
|
|
)
|
|
|
|
XCTAssertEqual(request.url?.relativeString, "v1/provisioning/foo%20bar")
|
|
XCTAssertEqual(request.httpMethod, "PUT")
|
|
XCTAssertEqual(request.parameters as! [String: String], ["body": "AQID"])
|
|
XCTAssertTrue(request.shouldHaveAuthorizationHeaders)
|
|
}
|
|
|
|
// MARK: - Message requests
|
|
|
|
func testSubmitMessageRequest() throws {
|
|
let udAccessKey = try getUdAccessKey()
|
|
|
|
let serviceId = ServiceId(UUID())
|
|
|
|
let request = OWSRequestFactory.submitMessageRequest(
|
|
withServiceId: ServiceIdObjC(serviceId),
|
|
messages: [],
|
|
timestamp: 1234,
|
|
udAccessKey: udAccessKey,
|
|
isOnline: true,
|
|
isUrgent: false,
|
|
isStory: false
|
|
)
|
|
|
|
let url = try XCTUnwrap(request.url, "request.url")
|
|
XCTAssertEqual(request.httpMethod, "PUT")
|
|
XCTAssertEqual(url.path, "v1/messages/\(serviceId.uuidValue.uuidString)")
|
|
XCTAssertEqual(Set(request.parameters.keys), Set(["messages", "timestamp", "online", "urgent"]))
|
|
XCTAssertEqual(request.parameters["messages"] as? NSArray, [])
|
|
XCTAssertEqual(request.parameters["timestamp"] as? UInt, 1234)
|
|
XCTAssertEqual(request.parameters["online"] as? Bool, true)
|
|
XCTAssertEqual(request.parameters["urgent"] as? Bool, false)
|
|
XCTAssertEqual(try queryItemsAsDictionary(url: url), ["story": "false"])
|
|
XCTAssertEqual(request.allHTTPHeaderFields?["Unidentified-Access-Key"], udAccessKey.keyData.base64EncodedString())
|
|
}
|
|
|
|
func testSubmitMultiRecipientMessageRequest() throws {
|
|
let ciphertext = try XCTUnwrap("hello".data(using: .utf8))
|
|
let udAccessKey = try getUdAccessKey()
|
|
|
|
let request = OWSRequestFactory.submitMultiRecipientMessageRequest(
|
|
ciphertext: ciphertext,
|
|
compositeUDAccessKey: udAccessKey,
|
|
timestamp: 1234,
|
|
isOnline: true,
|
|
isUrgent: false,
|
|
isStory: false
|
|
)
|
|
|
|
let url = try XCTUnwrap(request.url, "request.url")
|
|
XCTAssertEqual(request.httpMethod, "PUT")
|
|
XCTAssertEqual(url.path, "v1/messages/multi_recipient")
|
|
XCTAssertEqual(try queryItemsAsDictionary(url: url), ["ts": "1234", "online": "true", "urgent": "false", "story": "false"])
|
|
XCTAssertEqual(request.allHTTPHeaderFields?["Content-Type"], "application/vnd.signal-messenger.mrm")
|
|
XCTAssertEqual(request.allHTTPHeaderFields?["Unidentified-Access-Key"], udAccessKey.keyData.base64EncodedString())
|
|
XCTAssertEqual(request.httpBody, ciphertext)
|
|
}
|
|
|
|
// MARK: - Donations
|
|
|
|
func testDonationConfiguration() {
|
|
let request = OWSRequestFactory.donationConfiguration()
|
|
|
|
XCTAssertEqual(request.url?.path, "v1/subscription/configuration")
|
|
XCTAssertEqual(request.httpMethod, "GET")
|
|
XCTAssertFalse(request.shouldHaveAuthorizationHeaders)
|
|
}
|
|
|
|
func testBoostStripeCreatePaymentIntentWithAmount() {
|
|
let request = OWSRequestFactory.boostStripeCreatePaymentIntent(
|
|
integerMoneyValue: 123,
|
|
inCurrencyCode: "CHF",
|
|
level: 456
|
|
)
|
|
|
|
XCTAssertEqual(request.url?.path, "v1/subscription/boost/create")
|
|
XCTAssertEqual(request.httpMethod, "POST")
|
|
XCTAssertEqual(Set(request.parameters.keys), Set(["currency", "amount", "level"]))
|
|
XCTAssertEqual(request.parameters["currency"] as? String, "chf")
|
|
XCTAssertEqual(request.parameters["amount"] as? UInt, 123)
|
|
XCTAssertEqual(request.parameters["level"] as? UInt64, 456)
|
|
XCTAssertFalse(request.shouldHaveAuthorizationHeaders)
|
|
}
|
|
|
|
func testBoostPaypalCreatePaymentIntentWithAmount() {
|
|
let request = OWSRequestFactory.boostPaypalCreatePayment(
|
|
integerMoneyValue: 123,
|
|
inCurrencyCode: "CHF",
|
|
level: 456,
|
|
returnUrl: URL(string: "https://example.com/approved")!,
|
|
cancelUrl: URL(string: "https://example.com/canceled")!
|
|
)
|
|
|
|
XCTAssertEqual(request.url?.path, "v1/subscription/boost/paypal/create")
|
|
XCTAssertEqual(request.httpMethod, "POST")
|
|
XCTAssertEqual(Set(request.parameters.keys), Set([
|
|
"currency", "amount", "level",
|
|
"returnUrl", "cancelUrl"
|
|
]))
|
|
XCTAssertEqual(request.parameters["currency"] as? String, "chf")
|
|
XCTAssertEqual(request.parameters["amount"] as? UInt, 123)
|
|
XCTAssertEqual(request.parameters["level"] as? UInt64, 456)
|
|
XCTAssertEqual(request.parameters["returnUrl"] as? String, "https://example.com/approved")
|
|
XCTAssertEqual(request.parameters["cancelUrl"] as? String, "https://example.com/canceled")
|
|
XCTAssertFalse(request.shouldHaveAuthorizationHeaders)
|
|
}
|
|
|
|
func testSetSubscriberID() {
|
|
let request = OWSRequestFactory.setSubscriberID(.init([255, 128]))
|
|
|
|
XCTAssertEqual(request.url?.path, "v1/subscription/_4A")
|
|
XCTAssertEqual(request.httpMethod, "PUT")
|
|
XCTAssertFalse(request.shouldHaveAuthorizationHeaders)
|
|
XCTAssertTrue(request.shouldRedactUrlInLogs)
|
|
}
|
|
|
|
func testDeleteSubscriberID() {
|
|
let request = OWSRequestFactory.deleteSubscriberID(.init([255, 128]))
|
|
|
|
XCTAssertEqual(request.url?.path, "v1/subscription/_4A")
|
|
XCTAssertEqual(request.httpMethod, "DELETE")
|
|
XCTAssertFalse(request.shouldHaveAuthorizationHeaders)
|
|
XCTAssertTrue(request.shouldRedactUrlInLogs)
|
|
}
|
|
|
|
// MARK: - Spam
|
|
|
|
func testReportSpamFromUuid() {
|
|
let request = OWSRequestFactory.reportSpam(
|
|
from: ServiceId(uuidString: "37EBAFB5-91D6-4C63-BFF7-82F540856386")!,
|
|
withServerGuid: "abc 123",
|
|
reportingToken: nil
|
|
)
|
|
|
|
XCTAssertEqual(
|
|
request.url?.relativeString,
|
|
"v1/messages/report/37EBAFB5-91D6-4C63-BFF7-82F540856386/abc%20123"
|
|
)
|
|
XCTAssertEqual(request.httpMethod, "POST")
|
|
XCTAssertEqual(request.parameters as! [String: String], [:])
|
|
XCTAssertTrue(request.shouldHaveAuthorizationHeaders)
|
|
}
|
|
|
|
func testReportSpamFromUuidWithEmptyServerGuid() {
|
|
// This will probably never happen, but if the server wants, this should be allowed.
|
|
let request = OWSRequestFactory.reportSpam(
|
|
from: ServiceId(uuidString: "EB7B0432-BE7F-4A62-9859-4D7835D0D724")!,
|
|
withServerGuid: "",
|
|
reportingToken: nil
|
|
)
|
|
|
|
XCTAssertEqual(
|
|
request.url?.relativeString,
|
|
"v1/messages/report/EB7B0432-BE7F-4A62-9859-4D7835D0D724/"
|
|
)
|
|
}
|
|
|
|
func testReportSpamWithReportingToken() {
|
|
let request = OWSRequestFactory.reportSpam(
|
|
from: ServiceId(UUID()),
|
|
withServerGuid: "abc123",
|
|
reportingToken: .init(data: .init([97, 98, 99]))
|
|
)
|
|
|
|
XCTAssertEqual(request.parameters as! [String: String], ["token": "YWJj"])
|
|
}
|
|
|
|
// MARK: - Usernames
|
|
|
|
func testReserveUsername() {
|
|
let request = OWSRequestFactory.reserveUsernameRequest(usernameHashes: ["boba", "fett"])
|
|
|
|
XCTAssertEqual(request.url?.path, "v1/accounts/username_hash/reserve")
|
|
XCTAssertEqual(request.httpMethod, "PUT")
|
|
XCTAssertEqual(request.parameters as! [String: [String]], ["usernameHashes": ["boba", "fett"]])
|
|
XCTAssertTrue(request.shouldHaveAuthorizationHeaders)
|
|
}
|
|
|
|
func testConfirmReservedUsername() {
|
|
let request = OWSRequestFactory.confirmReservedUsernameRequest(
|
|
reservedUsernameHash: "jango",
|
|
reservedUsernameZKProof: "fett"
|
|
)
|
|
|
|
XCTAssertEqual(request.url?.path, "v1/accounts/username_hash/confirm")
|
|
XCTAssertEqual(request.httpMethod, "PUT")
|
|
XCTAssertEqual(request.parameters as! [String: String], [
|
|
"usernameHash": "jango",
|
|
"zkProof": "fett"
|
|
])
|
|
XCTAssertTrue(request.shouldHaveAuthorizationHeaders)
|
|
}
|
|
|
|
func testDeleteExistingUsername() {
|
|
let request = OWSRequestFactory.deleteExistingUsernameRequest()
|
|
|
|
XCTAssertEqual(request.url?.path, "v1/accounts/username_hash")
|
|
XCTAssertEqual(request.httpMethod, "DELETE")
|
|
XCTAssertEqual(request.parameters as! [String: String], [:])
|
|
XCTAssertTrue(request.shouldHaveAuthorizationHeaders)
|
|
}
|
|
|
|
func testLookupAciForUsername() {
|
|
let request = OWSRequestFactory.lookupAciUsernameRequest(usernameHashToLookup: "obi-wan")
|
|
|
|
XCTAssertEqual(request.url?.path, "v1/accounts/username_hash/obi-wan")
|
|
XCTAssertEqual(request.httpMethod, "GET")
|
|
XCTAssertEqual(request.parameters as! [String: String], [:])
|
|
XCTAssertTrue(!request.shouldHaveAuthorizationHeaders)
|
|
}
|
|
}
|