@webex/internal-plugin-encryption 3.0.0-beta.42 → 3.0.0-beta.420

package/test/unit/spec/kms-certificate-validation.js

@@ -1,6 +1,6 @@
 import {assert} from '@webex/test-helper-chai';
 
-import validateCert, {KMSError} from '../../../src/kms-certificate-validation';
+import validateCert, {KMSError, validateCommonName, X509_SUBJECT_ALT_NAME_KEY} from '../../../src/kms-certificate-validation';
 
 const caroots = [
   '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',
@@ -163,3 +163,36 @@ describe('internal-plugin-encryption', () => {
     });
   });
 });
+
+describe('validateCommonName', () => {
+
+  const checkValidate = (SAN, kidHostname) => {
+    validateCommonName(
+      [
+        {
+          extensions: [
+            {
+              extnID: X509_SUBJECT_ALT_NAME_KEY,
+              parsedValue: {
+                altNames: [{value: 'Example.com'}],
+              },
+            },
+          ],
+        },
+      ],
+      {kid: 'https://Example.com'}
+    );
+  }
+
+  it('handles mixed case SAN', () => {
+    checkValidate('Example.com', 'https://Example.com');
+  });
+
+  it('handles different case SAN', () => {
+    checkValidate('ExAmpLe.cOm', 'https://example.com');
+  });
+
+  it('handles different case kid hostname', () => {
+    checkValidate('example.com', 'https://ExAmpLe.cOm');
+  });
+});

package/test/unit/spec/kms-errors.js

@@ -0,0 +1,70 @@
+import {assert} from '@webex/test-helper-chai';
+import {handleKmsKeyRevokedEncryptionFailure} from '../../../src/kms-errors'
+import sinon from 'sinon';
+
+describe('handleKmsKeyRevokedEncryptionFailure', () => {
+
+    it('triggers `event:kms:key:revoke:encryption:failure` event when correct error code is detected', () => {
+        const webex = {
+            internal: {
+                encryption: {
+                trigger: sinon.spy()
+              },
+            },
+          }
+
+        const item = {
+            status: 405,
+            body: {
+                errorCode: 405005,
+            }
+        }
+
+        handleKmsKeyRevokedEncryptionFailure(item, webex);
+        
+        assert.calledOnce(webex.internal.encryption.trigger);
+        assert.calledWithExactly(webex.internal.encryption.trigger, `event:kms:key:revoke:encryption:failure`);
+    });
+
+    it('does not trigger `event:kms:key:revoke:encryption:failure` event when correct status but wrong error code is detected', () => {
+        const webex = {
+            internal: {
+                encryption: {
+                trigger: sinon.spy()
+              },
+            },
+          }
+
+        const item = {
+            status: 405,
+            body: {
+                errorCode: 405009,
+            }
+        }
+
+        handleKmsKeyRevokedEncryptionFailure(item, webex);
+         
+        assert.notCalled(webex.internal.encryption.trigger);
+       });
+
+       it('does not trigger `event:kms:key:revoke:encryption:failure` event when wrong status but correct error code is detected', () => {
+        const webex = {
+            internal: {
+                encryption: {
+                trigger: sinon.spy()
+              },
+            },
+          }
+
+        const item = {
+            status: 403,
+            body: {
+                errorCode: 405005,
+            }
+        }
+
+        handleKmsKeyRevokedEncryptionFailure(item, webex);
+         
+        assert.notCalled(webex.internal.encryption.trigger);
+       });
+});

package/test/unit/spec/kms.js

@@ -0,0 +1,103 @@
+/*!
+ * Copyright (c) 2015-2020 Cisco Systems, Inc. See LICENSE file.
+ */
+/* eslint-disable no-underscore-dangle */
+import Url from 'url';
+
+import {assert} from '@webex/test-helper-chai';
+import MockWebex from '@webex/test-helper-mock-webex';
+import sinon from 'sinon';
+import Encryption from '@webex/internal-plugin-encryption';
+import {KmsError} from '../../../dist/kms-errors';
+
+describe('internal-plugin-encryption', () => {
+  describe('kms', () => {
+    let webex;
+
+    beforeEach(() => {
+      webex = new MockWebex({
+        children: {
+          encryption: Encryption,
+        },
+      });
+    });
+
+    describe('key management', () => {
+      const options = undefined;
+      let spyStub;
+
+      beforeEach(() => {
+        const returnStub = (obj) => Promise.resolve(obj);
+
+        spyStub = sinon.stub(webex.internal.encryption.kms, 'request').callsFake(returnStub);
+      });
+
+      afterEach(() => {
+        spyStub.resetHistory();
+      });
+
+      it('listAllCustomerMasterKey', async () => {
+        await webex.internal.encryption.kms.listAllCustomerMasterKey({
+          assignedOrgId: 'xx-sds-assdf',
+          awsKms: false,
+        });
+
+        await webex.internal.encryption.kms.listAllCustomerMasterKey({
+          assignedOrgId: 'xx-sds-assdf',
+          awsKms: true,
+        });
+
+        assert.equal(spyStub.args[0][0].uri, '/cmk');
+        assert.equal(spyStub.args[1][0].uri, '/awsKmsCmk');
+      });
+
+      it('uploadCustomerMasterKey', async () => {
+        await webex.internal.encryption.kms.uploadCustomerMasterKey({
+          assignedOrgId: 'xx-sds-assdf',
+          awsKms: false,
+        });
+
+        await webex.internal.encryption.kms.uploadCustomerMasterKey({
+          assignedOrgId: 'xx-sds-assdf',
+          awsKms: true,
+        });
+
+        assert.equal(spyStub.args[0][0].uri, '/cmk');
+        assert.equal(spyStub.args[1][0].uri, '/awsKmsCmk');
+      });
+
+      it('deleteAllCustomerMasterKeys', async () => {
+        await webex.internal.encryption.kms.deleteAllCustomerMasterKeys({
+          assignedOrgId: 'xx-sds-assdf',
+          awsKms: false,
+        });
+
+        await webex.internal.encryption.kms.deleteAllCustomerMasterKeys({
+          assignedOrgId: 'xx-sds-assdf',
+          awsKms: true,
+        });
+
+        assert.equal(spyStub.args[0][0].uri, '/cmk');
+        assert.equal(spyStub.args[1][0].uri, '/awsKmsCmk');
+      });
+    });
+
+    describe('KMS error', () => {
+      it('KMSError', async () => {
+        const error = new KmsError({
+          status: 404,
+          errorCode: 30005,
+          reason: 'cannot fetch keys',
+          requestId: '3434343',
+        });
+        assert.equal(
+          error.toString(),
+          'KmsError: cannot fetch keys\n' +
+            'KMS_RESPONSE_STATUS: 404\n' +
+            'KMS_REQUEST_ID: 3434343\n' +
+            'KMS_ErrorCode: 30005'
+        );
+      });
+    });
+  });
+});