moxxmpp/packages/moxxmpp/test/sasl/scram_test.dart

import 'dart:convert';
import 'package:hex/hex.dart';
import 'package:moxxmpp/moxxmpp.dart';
import 'package:test/test.dart';
import '../helpers/xmpp.dart';

final scramSha1StreamFeatures = XMLNode(
  tag: 'stream:features',
  children: [
    XMLNode.xmlns(
      tag: 'mechanisms',
      xmlns: saslXmlns,
      children: [
        XMLNode(
          tag: 'mechanism',
          text: 'SCRAM-SHA-1',
        )
      ],
    )
  ],
);
final scramSha256StreamFeatures = XMLNode(
  tag: 'stream:features',
  children: [
    XMLNode.xmlns(
      tag: 'mechanisms',
      xmlns: saslXmlns,
      children: [
        XMLNode(
          tag: 'mechanism',
          text: 'SCRAM-SHA-256',
        )
      ],
    )
  ],
);

void main() {
  final fakeSocket = StubTCPSocket(play: []);
  test('Test SASL SCRAM-SHA-1', () async {
      final negotiator = SaslScramNegotiator(0, 'n=user,r=fyko+d2lbbFgONRv9qkxdawL', 'fyko+d2lbbFgONRv9qkxdawL', ScramHashType.sha1);
      negotiator.register(
        NegotiatorAttributes(
          (XMLNode _, {String? redact}) {},
          () => ConnectionSettings(jid: JID.fromString('user@server'), password: 'pencil', useDirectTLS: true, allowPlainAuth: true),
          (_) async {},
          getNegotiatorNullStub,
          getManagerNullStub,
          () => JID.fromString('user@server'),
          () => fakeSocket,
          () => false,
        ),
      );

      expect(
        HEX.encode(await negotiator.calculateSaltedPassword('QSXCR+Q6sek8bf92', 4096)),
        '1d96ee3a529b5a5f9e47c01f229a2cb8a6e15f7d',
      );
      expect(
        HEX.encode(
          await negotiator.calculateClientKey(HEX.decode('1d96ee3a529b5a5f9e47c01f229a2cb8a6e15f7d')),
        ),
        'e234c47bf6c36696dd6d852b99aaa2ba26555728',
      );
      const authMessage = 'n=user,r=fyko+d2lbbFgONRv9qkxdawL,r=fyko+d2lbbFgONRv9qkxdawL3rfcNHYJY1ZVvWVs7j,s=QSXCR+Q6sek8bf92,i=4096,c=biws,r=fyko+d2lbbFgONRv9qkxdawL3rfcNHYJY1ZVvWVs7j';
      expect(
        HEX.encode(
          await negotiator.calculateClientSignature(authMessage, HEX.decode('e9d94660c39d65c38fbad91c358f14da0eef2bd6')),
        ),
        '5d7138c486b0bfabdf49e3e2da8bd6e5c79db613',
      );
      expect(
        HEX.encode(
          negotiator.calculateClientProof(HEX.decode('e234c47bf6c36696dd6d852b99aaa2ba26555728'), HEX.decode('5d7138c486b0bfabdf49e3e2da8bd6e5c79db613')),
        ),
        'bf45fcbf7073d93d022466c94321745fe1c8e13b',
      );
      expect(
        HEX.encode(
          await negotiator.calculateServerSignature(authMessage, HEX.decode('0fe09258b3ac852ba502cc62ba903eaacdbf7d31')),
        ),
        'ae617da6a57c4bbb2e0286568dae1d251905b0a4',
      );
      expect(
        HEX.encode(
          await negotiator.calculateServerKey(HEX.decode('1d96ee3a529b5a5f9e47c01f229a2cb8a6e15f7d')),
        ),
        '0fe09258b3ac852ba502cc62ba903eaacdbf7d31',
      );
      expect(
        HEX.encode(
          negotiator.calculateClientProof(
            HEX.decode('e234c47bf6c36696dd6d852b99aaa2ba26555728'),
            HEX.decode('5d7138c486b0bfabdf49e3e2da8bd6e5c79db613'),
          ),
        ),
        'bf45fcbf7073d93d022466c94321745fe1c8e13b',
      );

      expect(await negotiator.calculateChallengeResponse('cj1meWtvK2QybGJiRmdPTlJ2OXFreGRhd0wzcmZjTkhZSlkxWlZ2V1ZzN2oscz1RU1hDUitRNnNlazhiZjkyLGk9NDA5Ng=='), 'c=biws,r=fyko+d2lbbFgONRv9qkxdawL3rfcNHYJY1ZVvWVs7j,p=v0X8v3Bz2T0CJGbJQyF0X+HI4Ts=');
  });

  test('Test SASL SCRAM-SHA-256', () async {
      String? lastMessage;
      final negotiator = SaslScramNegotiator(0, 'n=user,r=rOprNGfwEbeRWgbNEkqO', 'rOprNGfwEbeRWgbNEkqO', ScramHashType.sha256);
      negotiator.register(
        NegotiatorAttributes(
          (XMLNode n, {String? redact}) => lastMessage = n.innerText(),
          () => ConnectionSettings(jid: JID.fromString('user@server'), password: 'pencil', useDirectTLS: true, allowPlainAuth: true),
          (_) async {},
          getNegotiatorNullStub,
          getManagerNullStub,
          () => JID.fromString('user@server'),
          () => fakeSocket,
          () => false,
        ),
      );

      await negotiator.negotiate(scramSha256StreamFeatures);
      expect(
        utf8.decode(base64Decode(lastMessage!)),
        'n,,n=user,r=rOprNGfwEbeRWgbNEkqO',
      );
      
      await negotiator.negotiate(XMLNode.fromString("<challenge xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>cj1yT3ByTkdmd0ViZVJXZ2JORWtxTyVodllEcFdVYTJSYVRDQWZ1eEZJbGopaE5sRiRrMCxzPVcyMlphSjBTTlk3c29Fc1VFamI2Z1E9PSxpPTQwOTY=</challenge>"));
      expect(
        utf8.decode(base64Decode(lastMessage!)),
        'c=biws,r=rOprNGfwEbeRWgbNEkqO%hvYDpWUa2RaTCAfuxFIlj)hNlF\$k0,p=dHzbZapWIk4jUhN+Ute9ytag9zjfMHgsqmmiz7AndVQ=',
      );

      final result = await negotiator.negotiate(XMLNode.fromString("<success xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>dj02cnJpVFJCaTIzV3BSUi93dHVwK21NaFVaVW4vZEI1bkxUSlJzamw5NUc0PQ==</success>"));

      expect(result.get<NegotiatorState>(), NegotiatorState.done);
  });
  
  test('Test a positive server signature check', () async {
      final negotiator = SaslScramNegotiator(0, 'n=user,r=fyko+d2lbbFgONRv9qkxdawL', 'fyko+d2lbbFgONRv9qkxdawL', ScramHashType.sha1);
      negotiator.register(
        NegotiatorAttributes(
          (XMLNode _, {String? redact}) {},
          () => ConnectionSettings(jid: JID.fromString('user@server'), password: 'pencil', useDirectTLS: true, allowPlainAuth: true),
          (_) async {},
          getNegotiatorNullStub,
          getManagerNullStub,
          () => JID.fromString('user@server'),
          () => fakeSocket,
          () => false,
        ),
      );

      await negotiator.negotiate(scramSha1StreamFeatures);
      await negotiator.negotiate(XMLNode.fromString("<challenge xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>cj1meWtvK2QybGJiRmdPTlJ2OXFreGRhd0wzcmZjTkhZSlkxWlZ2V1ZzN2oscz1RU1hDUitRNnNlazhiZjkyLGk9NDA5Ng==</challenge>"));
      final result = await negotiator.negotiate(XMLNode.fromString("<success xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>dj1ybUY5cHFWOFM3c3VBb1pXamE0ZEpSa0ZzS1E9</success>"));

      expect(result.get<NegotiatorState>(), NegotiatorState.done);
  });

  test('Test a negative server signature check', () async {
      final negotiator = SaslScramNegotiator(0, 'n=user,r=fyko+d2lbbFgONRv9qkxdawL', 'fyko+d2lbbFgONRv9qkxdawL', ScramHashType.sha1);
      negotiator.register(
        NegotiatorAttributes(
          (XMLNode _, {String? redact}) {},
          () => ConnectionSettings(jid: JID.fromString('user@server'), password: 'pencil', useDirectTLS: true, allowPlainAuth: true),
          (_) async {},
          getNegotiatorNullStub,
          getManagerNullStub,
          () => JID.fromString('user@server'),
          () => fakeSocket,
          () => false,
        ),
      );

      var result;
      result = await negotiator.negotiate(scramSha1StreamFeatures);
      expect(result.isType<NegotiatorState>(), true);

      result = await negotiator.negotiate(XMLNode.fromString("<challenge xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>cj1meWtvK2QybGJiRmdPTlJ2OXFreGRhd0wzcmZjTkhZSlkxWlZ2V1ZzN2oscz1RU1hDUitRNnNlazhiZjkyLGk9NDA5Ng==</challenge>"));
      expect(result.isType<NegotiatorState>(), true);

      result = await negotiator.negotiate(XMLNode.fromString("<success xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>dj1zbUY5cHFWOFM3c3VBb1pXamE0ZEpSa0ZzS1E9</success>"));
      expect(result.isType<NegotiatorError>(), true);
  });

  test('Test a resetting the SCRAM negotiator', () async {
      final negotiator = SaslScramNegotiator(0, 'n=user,r=fyko+d2lbbFgONRv9qkxdawL', 'fyko+d2lbbFgONRv9qkxdawL', ScramHashType.sha1);
      negotiator.register(
        NegotiatorAttributes(
          (XMLNode _, {String? redact}) {},
          () => ConnectionSettings(jid: JID.fromString('user@server'), password: 'pencil', useDirectTLS: true, allowPlainAuth: true),
          (_) async {},
          getNegotiatorNullStub,
          getManagerNullStub,
          () => JID.fromString('user@server'),
          () => fakeSocket,
          () => false,
        ),
      );

      await negotiator.negotiate(scramSha1StreamFeatures);
      await negotiator.negotiate(XMLNode.fromString("<challenge xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>cj1meWtvK2QybGJiRmdPTlJ2OXFreGRhd0wzcmZjTkhZSlkxWlZ2V1ZzN2oscz1RU1hDUitRNnNlazhiZjkyLGk9NDA5Ng==</challenge>"));
      final result1 = await negotiator.negotiate(XMLNode.fromString("<success xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>dj1ybUY5cHFWOFM3c3VBb1pXamE0ZEpSa0ZzS1E9</success>"));
      expect(result1.get<NegotiatorState>(), NegotiatorState.done);

      // Reset and try again
      negotiator.reset();
      await negotiator.negotiate(scramSha1StreamFeatures);
      await negotiator.negotiate(XMLNode.fromString("<challenge xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>cj1meWtvK2QybGJiRmdPTlJ2OXFreGRhd0wzcmZjTkhZSlkxWlZ2V1ZzN2oscz1RU1hDUitRNnNlazhiZjkyLGk9NDA5Ng==</challenge>"));
      final result2 = await negotiator.negotiate(XMLNode.fromString("<success xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>dj1ybUY5cHFWOFM3c3VBb1pXamE0ZEpSa0ZzS1E9</success>"));
      expect(result2.get<NegotiatorState>(), NegotiatorState.done);
  });
}