add 2MFA

2026-06-01 16:37:23 -05:00
parent 421abd178c
commit 7f0a7b1d91
17 changed files with 815 additions and 5 deletions
@@ -0,0 +1,30 @@
+import { describe, expect, test } from "bun:test";
+import { buildTotpUri, generateMfaSecret, generateTotpCode, verifyTotpCode } from "./mfa";
+
+describe("mfa totp", () => {
+  test("matches RFC 6238 test vector with 8 digits", () => {
+    const secret = "GEZDGNBVGY3TQOJQGEZDGNBVGY3TQOJQ";
+    expect(generateTotpCode(secret, 59_000, 8)).toBe("94287082");
+  });
+
+  test("verifies current and adjacent window codes", () => {
+    const secret = generateMfaSecret();
+    const now = Date.now();
+    const code = generateTotpCode(secret, now);
+
+    expect(verifyTotpCode(secret, code, now)).toBe(true);
+    expect(verifyTotpCode(secret, "000000", now)).toBe(false);
+  });
+
+  test("builds an authenticator URI", () => {
+    const uri = buildTotpUri({
+      issuer: "Overlord",
+      accountName: "admin",
+      secret: "JBSWY3DPEHPK3PXP",
+    });
+
+    expect(uri).toContain("otpauth://totp/");
+    expect(uri).toContain("secret=JBSWY3DPEHPK3PXP");
+    expect(uri).toContain("issuer=Overlord");
+  });
+});