def test_location_update_badecred_1():
db_conn = get_db()
u = db.user_with_pk(db_conn, U1.pk)
loc = location.Location(u, loca.Coords(42, 69), time.time())
# use a Stub instead of encrypted signed AccountCred
lu = location.LocationUpdate(loc, Stub(90210))
slu = SignedMessage.sign(lu, SK1)
resp = server.handle_location_update(db_conn, slu)
assert not resp.ok
assert resp.cred is None # TODO
assert resp.err == location.LocationUpdateRespErr.Malformed
def test_location_update_wrong_user():
db_conn = get_db()
u = db.user_with_pk(db_conn, U1.pk)
# credential is for a user other than the one who signed the message
ecred = get_cred(u, cred_wrong_user=True)
loc = location.Location(u, loca.Coords(42, 69), time.time())
lu = location.LocationUpdate(loc, ecred)
slu = SignedMessage.sign(lu, SK1)
resp = server.handle_location_update(db_conn, slu)
assert not resp.ok
assert resp.cred is None # TODO
assert resp.err == CredChalErr.WrongUser
def test_location_update_expired_cred():
db_conn = get_db()
u = db.user_with_pk(db_conn, U1.pk)
# cred is expired
ecred = get_cred(u, cred_expired=True)
loc = location.Location(u, loca.Coords(42, 69), time.time())
lu = location.LocationUpdate(loc, ecred)
slu = SignedMessage.sign(lu, SK1)
resp = server.handle_location_update(db_conn, slu)
assert not resp.ok
assert resp.cred is None # TODO
assert resp.err == CredChalErr.BadCred
def test_location_update_badscred_2():
db_conn = get_db()
u = db.user_with_pk(db_conn, U1.pk)
# ecred is correct but contains a broken SignedMessage
ecred = get_cred(u, scred_munge=True)
loc = location.Location(u, loca.Coords(42, 69), time.time())
lu = location.LocationUpdate(loc, ecred)
slu = SignedMessage.sign(lu, SK1)
resp = server.handle_location_update(db_conn, slu)
assert not resp.ok
assert resp.cred is None # TODO
assert resp.err == CredChalErr.Malformed
def test_location_update_unknown_user():
db_conn = get_db()
u = db.user_with_pk(db_conn, U1.pk)
ecred = get_cred(u)
loc = location.Location(u, loca.Coords(42, 69), time.time())
lu = location.LocationUpdate(loc, ecred)
# user who signed this message is not even in the db
fake_sk = crypto.Seckey((1).to_bytes(32, byteorder='big'))
slu = SignedMessage.sign(lu, fake_sk)
resp = server.handle_location_update(db_conn, slu)
assert not resp.ok
assert resp.cred is None # TODO
assert resp.err == SignedMessageErr.UnknownUser
def test_location_update_badcred_2():
db_conn = get_db()
u = db.user_with_pk(db_conn, U1.pk)
# ecred is correct and contains good SignedMessage, but the SignedMessage
# is signed by the wrong key
ecred = get_cred(u, cred_wrong_key=True)
loc = location.Location(u, loca.Coords(42, 69), time.time())
lu = location.LocationUpdate(loc, ecred)
slu = SignedMessage.sign(lu, SK1)
resp = server.handle_location_update(db_conn, slu)
assert not resp.ok
assert resp.cred is None # TODO
assert resp.err == CredChalErr.BadCred
def test_location_update_badecred_3():
db_conn = get_db()
u = db.user_with_pk(db_conn, U1.pk)
ecred = get_cred(u)
# munge the enc part of the encrypted signed account cred
ecred.ctext_nonce = b'fooooo'
loc = location.Location(u, loca.Coords(42, 69), time.time())
lu = location.LocationUpdate(loc, ecred)
slu = SignedMessage.sign(lu, SK1)
resp = server.handle_location_update(db_conn, slu)
assert not resp.ok
assert resp.cred is None # TODO
assert resp.err == CredChalErr.Malformed
def test_location_update_db_inserted():
db_conn = get_db()
u = db.user_with_pk(db_conn, U1.pk)
ecred = get_cred(u)
loc = location.Location(u, loca.Coords(42, 69), time.time())
lu = location.LocationUpdate(loc, ecred)
slu = SignedMessage.sign(lu, SK1)
server.handle_location_update(db_conn, slu)
db_locs = list(db.locations_for_user(db_conn, u))
assert len(db_locs) == 1
assert loc.rowid is None
loc.rowid = db_locs[0].rowid
assert db_locs[0] == loc
def test_location_update_badsig():
db_conn = get_db()
u = db.user_with_pk(db_conn, U1.pk)
ecred = get_cred(u)
loc = location.Location(u, loca.Coords(42, 69), time.time())
lu = location.LocationUpdate(loc, ecred)
slu = SignedMessage.sign(lu, SK1)
# ruin the sig in the signed location update
slu.msg_bytes = b'foo'
resp = server.handle_location_update(db_conn, slu)
assert type(resp) == location.LocationUpdateResp
assert not resp.ok
assert resp.cred is None # TODO
assert resp.err == SignedMessageErr.BadSig
def test_location_update_happy(client):
u = db.user_with_pk(flask.g.db, U1.pk)
ecred = get_cred(u)
loc = loca.Location(u, loca.Coords(12, 34), time.time())
lu = location.LocationUpdate(loc, ecred)
req = SignedMessage.sign(lu, SK1)
rv = client.post(
'/location/update',
json=req.to_dict(),
)
assert rv.status_code == 200
resp = Message.from_dict(rv.json)
assert isinstance(resp, location.LocationUpdateResp)
assert resp.err is None
valid_cred, _ = server.validate_credchal(resp.cred, u)
assert valid_cred
def test_location_update_happy():
db_conn = get_db()
u = db.user_with_pk(db_conn, U1.pk)
ecred = get_cred(u)
original_expire = expire_from_ecred(ecred, server.ENCKEY,
server.IDKEY.pubkey)
loc = location.Location(u, loca.Coords(42, 69), time.time())
lu = location.LocationUpdate(loc, ecred)
slu = SignedMessage.sign(lu, SK1)
resp = server.handle_location_update(db_conn, slu)
assert resp.ok
assert isinstance(resp.cred, EncryptedMessage)
scred = EncryptedMessage.dec(resp.cred, server.ENCKEY)
cred, pk_used = SignedMessage.unwrap(scred)
assert pk_used == server.IDKEY.pubkey
assert cred.expire > original_expire
assert resp.err is None