74e917810a
In previous implementation service package provided types and functions that wrapped signing/verification of data with session token. This allowed us to use these functions for signing / verification of service requests of other packages. To support the expansion of messages with additional parts that need to be signed, you must be able to easily expand the signed data with new parts. To achieve the described goal, this commit makes the following changes: * adds GroupSignedPayloads and GroupVerifyPayloads functions; * renames SignedDataWithToken to RequestData, DataWithTokenSignAccumulator to RequestSignedData, DataWithTokenSignSource to RequestVerifyData; * renames SignDataWithSessionToken/VerifyAccumulatedSignaturesWithToken function to SignRequestData/VerifyRequestData and makes it to use GroupSignedPayloads/GroupVerifyPayloads internally.
185 lines
3.4 KiB
Go
185 lines
3.4 KiB
Go
package accounting
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/nspcc-dev/neofs-api-go/decimal"
|
|
"github.com/nspcc-dev/neofs-api-go/service"
|
|
"github.com/nspcc-dev/neofs-crypto/test"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestSignBalanceRequest(t *testing.T) {
|
|
sk := test.DecodeKey(0)
|
|
|
|
type sigType interface {
|
|
service.RequestData
|
|
service.SignKeyPairAccumulator
|
|
service.SignKeyPairSource
|
|
SetToken(*service.Token)
|
|
}
|
|
|
|
items := []struct {
|
|
constructor func() sigType
|
|
payloadCorrupt []func(sigType)
|
|
}{
|
|
{ // BalanceRequest
|
|
constructor: func() sigType {
|
|
return new(BalanceRequest)
|
|
},
|
|
payloadCorrupt: []func(sigType){
|
|
func(s sigType) {
|
|
req := s.(*BalanceRequest)
|
|
|
|
owner := req.GetOwnerID()
|
|
owner[0]++
|
|
|
|
req.SetOwnerID(owner)
|
|
},
|
|
},
|
|
},
|
|
{ // GetRequest
|
|
constructor: func() sigType {
|
|
return new(GetRequest)
|
|
},
|
|
payloadCorrupt: []func(sigType){
|
|
func(s sigType) {
|
|
req := s.(*GetRequest)
|
|
|
|
id, err := NewChequeID()
|
|
require.NoError(t, err)
|
|
|
|
req.SetID(id)
|
|
},
|
|
func(s sigType) {
|
|
req := s.(*GetRequest)
|
|
|
|
id := req.GetOwnerID()
|
|
id[0]++
|
|
|
|
req.SetOwnerID(id)
|
|
},
|
|
},
|
|
},
|
|
{ // PutRequest
|
|
constructor: func() sigType {
|
|
req := new(PutRequest)
|
|
|
|
amount := decimal.New(1)
|
|
req.SetAmount(amount)
|
|
|
|
return req
|
|
},
|
|
payloadCorrupt: []func(sigType){
|
|
func(s sigType) {
|
|
req := s.(*PutRequest)
|
|
|
|
owner := req.GetOwnerID()
|
|
owner[0]++
|
|
|
|
req.SetOwnerID(owner)
|
|
},
|
|
func(s sigType) {
|
|
req := s.(*PutRequest)
|
|
|
|
mid := req.GetMessageID()
|
|
mid[0]++
|
|
|
|
req.SetMessageID(mid)
|
|
},
|
|
func(s sigType) {
|
|
req := s.(*PutRequest)
|
|
|
|
req.SetHeight(req.GetHeight() + 1)
|
|
},
|
|
func(s sigType) {
|
|
req := s.(*PutRequest)
|
|
|
|
amount := req.GetAmount()
|
|
if amount == nil {
|
|
req.SetAmount(decimal.New(0))
|
|
} else {
|
|
req.SetAmount(amount.Add(decimal.New(amount.GetValue())))
|
|
}
|
|
},
|
|
},
|
|
},
|
|
{ // ListRequest
|
|
constructor: func() sigType {
|
|
return new(ListRequest)
|
|
},
|
|
payloadCorrupt: []func(sigType){
|
|
func(s sigType) {
|
|
req := s.(*ListRequest)
|
|
|
|
owner := req.GetOwnerID()
|
|
owner[0]++
|
|
|
|
req.SetOwnerID(owner)
|
|
},
|
|
},
|
|
},
|
|
{
|
|
constructor: func() sigType {
|
|
return new(DeleteRequest)
|
|
},
|
|
payloadCorrupt: []func(sigType){
|
|
func(s sigType) {
|
|
req := s.(*DeleteRequest)
|
|
|
|
id, err := NewChequeID()
|
|
require.NoError(t, err)
|
|
|
|
req.SetID(id)
|
|
},
|
|
func(s sigType) {
|
|
req := s.(*DeleteRequest)
|
|
|
|
owner := req.GetOwnerID()
|
|
owner[0]++
|
|
|
|
req.SetOwnerID(owner)
|
|
},
|
|
func(s sigType) {
|
|
req := s.(*DeleteRequest)
|
|
|
|
mid := req.GetMessageID()
|
|
mid[0]++
|
|
|
|
req.SetMessageID(mid)
|
|
},
|
|
},
|
|
},
|
|
}
|
|
|
|
for _, item := range items {
|
|
{ // token corruptions
|
|
v := item.constructor()
|
|
|
|
token := new(service.Token)
|
|
v.SetToken(token)
|
|
|
|
require.NoError(t, service.SignRequestData(sk, v))
|
|
|
|
require.NoError(t, service.VerifyRequestData(v))
|
|
|
|
token.SetSessionKey(append(token.GetSessionKey(), 1))
|
|
|
|
require.Error(t, service.VerifyRequestData(v))
|
|
}
|
|
|
|
{ // payload corruptions
|
|
for _, corruption := range item.payloadCorrupt {
|
|
v := item.constructor()
|
|
|
|
require.NoError(t, service.SignRequestData(sk, v))
|
|
|
|
require.NoError(t, service.VerifyRequestData(v))
|
|
|
|
corruption(v)
|
|
|
|
require.Error(t, service.VerifyRequestData(v))
|
|
}
|
|
}
|
|
}
|
|
}
|