31 lines
997 B
TypeScript
31 lines
997 B
TypeScript
|
import { describe, expect, test } from "bun:test";
|
||
|
|
import { buildTotpUri, generateMfaSecret, generateTotpCode, verifyTotpCode } from "./mfa";
|
||
|
|
|
||
|
|
describe("mfa totp", () => {
|
||
|
|
test("matches RFC 6238 test vector with 8 digits", () => {
|
||
|
|
const secret = "GEZDGNBVGY3TQOJQGEZDGNBVGY3TQOJQ";
|
||
|
|
expect(generateTotpCode(secret, 59_000, 8)).toBe("94287082");
|
||
|
|
});
|
||
|
|
|
||
|
|
test("verifies current and adjacent window codes", () => {
|
||
|
|
const secret = generateMfaSecret();
|
||
|
|
const now = Date.now();
|
||
|
|
const code = generateTotpCode(secret, now);
|
||
|
|
|
||
|
|
expect(verifyTotpCode(secret, code, now)).toBe(true);
|
||
|
|
expect(verifyTotpCode(secret, "000000", now)).toBe(false);
|
||
|
|
});
|
||
|
|
|
||
|
|
test("builds an authenticator URI", () => {
|
||
|
|
const uri = buildTotpUri({
|
||
|
|
issuer: "Overlord",
|
||
|
|
accountName: "admin",
|
||
|
|
secret: "JBSWY3DPEHPK3PXP",
|
||
|
|
});
|
||
|
|
|
||
|
|
expect(uri).toContain("otpauth://totp/");
|
||
|
|
expect(uri).toContain("secret=JBSWY3DPEHPK3PXP");
|
||
|
|
expect(uri).toContain("issuer=Overlord");
|
||
|
|
});
|
||
|
|
});
|