spec-3nweb-server 1.8.4 → 1.8.6

package/build/tests/libs-for-tests/async-jasmine.js

@@ -0,0 +1,77 @@
+"use strict";
+/*
+ Copyright (C) 2016 - 2017 3NSoft Inc.
+ 
+ This program is free software: you can redistribute it and/or modify it under
+ the terms of the GNU General Public License as published by the Free Software
+ Foundation, either version 3 of the License, or (at your option) any later
+ version.
+ 
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ See the GNU General Public License for more details.
+ 
+ You should have received a copy of the GNU General Public License along with
+ this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.afterEachAsync = exports.beforeEachAsync = exports.afterAllAsync = exports.beforeAllAsync = exports.fitAsync = exports.xitAsync = exports.itAsync = void 0;
+function itAsync(expectation, assertion, timeout) {
+    if (assertion) {
+        it(expectation, done => {
+            assertion().then(() => done(), err => done.fail(err));
+        }, timeout);
+    }
+    else {
+        it(expectation);
+    }
+}
+exports.itAsync = itAsync;
+function xitAsync(expectation, assertion, timeout) {
+    if (assertion) {
+        xit(expectation, done => {
+            assertion().then(() => done(), err => done.fail(err));
+        }, timeout);
+    }
+    else {
+        xit(expectation);
+    }
+}
+exports.xitAsync = xitAsync;
+function fitAsync(expectation, assertion, timeout) {
+    if (assertion) {
+        fit(expectation, done => {
+            assertion().then(() => done(), err => done.fail(err));
+        }, timeout);
+    }
+    else {
+        fit(expectation);
+    }
+}
+exports.fitAsync = fitAsync;
+function beforeAllAsync(action, timeout) {
+    beforeAll(done => {
+        action().then(() => done(), err => done.fail(err));
+    }, timeout);
+}
+exports.beforeAllAsync = beforeAllAsync;
+function afterAllAsync(action, timeout) {
+    afterAll(done => {
+        action().then(() => done(), err => done.fail(err));
+    }, timeout);
+}
+exports.afterAllAsync = afterAllAsync;
+function beforeEachAsync(action, timeout) {
+    beforeEach(done => {
+        action().then(() => done(), err => done.fail(err));
+    }, timeout);
+}
+exports.beforeEachAsync = beforeEachAsync;
+function afterEachAsync(action, timeout) {
+    afterEach(done => {
+        action().then(() => done(), err => done.fail(err));
+    }, timeout);
+}
+exports.afterEachAsync = afterEachAsync;
+Object.freeze(exports);

package/build/tests/libs-for-tests/bytes-equal.d.ts

@@ -0,0 +1 @@
+export declare function bytesEqual(a: Uint8Array, b: Uint8Array): boolean;

package/build/tests/libs-for-tests/bytes-equal.js

@@ -0,0 +1,34 @@
+"use strict";
+/*
+ Copyright (C) 2016 3NSoft Inc.
+ 
+ This program is free software: you can redistribute it and/or modify it under
+ the terms of the GNU General Public License as published by the Free Software
+ Foundation, either version 3 of the License, or (at your option) any later
+ version.
+ 
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ See the GNU General Public License for more details.
+ 
+ You should have received a copy of the GNU General Public License along with
+ this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bytesEqual = void 0;
+function bytesEqual(a, b) {
+    if (a.BYTES_PER_ELEMENT !== b.BYTES_PER_ELEMENT) {
+        return false;
+    }
+    if (a.length !== b.length) {
+        return false;
+    }
+    for (let i = 0; i < a.length; i += 1) {
+        if (a[i] !== b[i]) {
+            return false;
+        }
+    }
+    return true;
+}
+exports.bytesEqual = bytesEqual;

package/build/tests/libs-for-tests/json-copy.d.ts

@@ -0,0 +1 @@
+export declare function copy<T>(orig: T): T;

package/build/tests/libs-for-tests/json-copy.js

@@ -0,0 +1,45 @@
+"use strict";
+/*
+ Copyright (C) 2016 3NSoft Inc.
+ 
+ This program is free software: you can redistribute it and/or modify it under
+ the terms of the GNU General Public License as published by the Free Software
+ Foundation, either version 3 of the License, or (at your option) any later
+ version.
+ 
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ See the GNU General Public License for more details.
+ 
+ You should have received a copy of the GNU General Public License along with
+ this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.copy = void 0;
+function copy(orig) {
+    if (typeof orig !== 'object') {
+        return orig;
+    }
+    if (orig === null) {
+        return null;
+    }
+    if (Array.isArray(orig)) {
+        let arr = orig;
+        let c = [];
+        for (let i = 0; i < arr.length; i += 1) {
+            c[i] = copy(arr[i]);
+        }
+        return c;
+    }
+    else {
+        let c = {};
+        let fields = Object.keys(orig);
+        for (let f of fields) {
+            c[f] = copy(orig[f]);
+        }
+        return c;
+    }
+}
+exports.copy = copy;
+Object.freeze(exports);

package/build/tests/libs-for-tests/json-equal.d.ts

@@ -0,0 +1,4 @@
+/**
+ * This module provides hex encoding of binary array into a string.
+ */
+export declare function deepEqual(a: any, b: any): boolean;

package/build/tests/libs-for-tests/json-equal.js

@@ -0,0 +1,67 @@
+"use strict";
+/*
+ Copyright (C) 2015 3NSoft Inc.
+ 
+ This program is free software: you can redistribute it and/or modify it under
+ the terms of the GNU General Public License as published by the Free Software
+ Foundation, either version 3 of the License, or (at your option) any later
+ version.
+ 
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ See the GNU General Public License for more details.
+ 
+ You should have received a copy of the GNU General Public License along with
+ this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deepEqual = void 0;
+/**
+ * This module provides hex encoding of binary array into a string.
+ */
+function deepEqual(a, b) {
+    let t = typeof a;
+    if (t !== typeof b) {
+        return false;
+    }
+    if (t !== 'object') {
+        return (a === b);
+    }
+    if (a === b) {
+        return true;
+    }
+    if ((a === null) || (b === null)) {
+        return false;
+    }
+    if (Array.isArray(a)) {
+        if (!Array.isArray(b)) {
+            return false;
+        }
+        let aArr = a;
+        let bArr = b;
+        if (aArr.length !== bArr.length) {
+            return false;
+        }
+        for (let i = 0; i < aArr.length; i += 1) {
+            if (!deepEqual(aArr[i], bArr[i])) {
+                return false;
+            }
+        }
+    }
+    else {
+        let keys = Object.keys(a);
+        if (keys.length !== Object.keys(b).length) {
+            return false;
+        }
+        for (let i = 0; i < keys.length; i += 1) {
+            let key = keys[i];
+            if (!deepEqual(a[key], b[key])) {
+                return false;
+            }
+        }
+    }
+    return true;
+}
+exports.deepEqual = deepEqual;
+Object.freeze(exports);

package/build/tests/libs-for-tests/mailerid.d.ts

@@ -0,0 +1,13 @@
+import { SignedLoad } from '../../lib-common/jwkeys';
+import { user as midUser } from '../../lib-common/mid-sigs-NaCl-Ed';
+import { User } from './pkl';
+export { User } from './pkl';
+/**
+ * @param midUrl
+ * @return a promise, resolvable to MailerId service's provisioning url.
+ */
+export declare function getProvPath(midUrl: string): Promise<any>;
+export declare function getMidRoot(midUrl: string): Promise<SignedLoad>;
+export declare function startMidSession(loginUrl: string, userId: string): Promise<string>;
+export declare function provisionMidSigner(midServiceUrl: string, user: User): Promise<midUser.MailerIdSigner>;
+export declare function doMailerIdLogin(loginUrl: string, user: User): Promise<string>;

package/build/tests/libs-for-tests/mailerid.js

@@ -0,0 +1,114 @@
+"use strict";
+/*
+ Copyright (C) 2016 3NSoft Inc.
+ 
+ This program is free software: you can redistribute it and/or modify it under
+ the terms of the GNU General Public License as published by the Free Software
+ Foundation, either version 3 of the License, or (at your option) any later
+ version.
+ 
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ See the GNU General Public License for more details.
+ 
+ You should have received a copy of the GNU General Public License along with
+ this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.doMailerIdLogin = exports.provisionMidSigner = exports.startMidSession = exports.getMidRoot = exports.getProvPath = void 0;
+const jwkeys_1 = require("../../lib-common/jwkeys");
+const xhr_utils_1 = require("./xhr-utils");
+const login_1 = require("../../lib-common/service-api/mailer-id/login");
+const provisioning_1 = require("../../lib-common/service-api/mailer-id/provisioning");
+const mid_sigs_NaCl_Ed_1 = require("../../lib-common/mid-sigs-NaCl-Ed");
+const pkl_1 = require("./pkl");
+const random_node_1 = require("../../lib-common/random-node");
+const url_1 = require("url");
+async function getMidData(midUrl) {
+    let reqOpts = {
+        url: midUrl,
+        method: 'GET',
+        responseType: 'json'
+    };
+    let rep = await (0, xhr_utils_1.doBodylessRequest)(reqOpts);
+    expect(rep.status).toBe(200);
+    return rep.data;
+}
+/**
+ * @param midUrl
+ * @return a promise, resolvable to MailerId service's provisioning url.
+ */
+async function getProvPath(midUrl) {
+    let midData = await getMidData(midUrl);
+    let prov = midData['provisioning'];
+    expect(typeof prov).toBe('string');
+    // return url with provision path
+    let pathStarts = midUrl.indexOf('/', midUrl.indexOf('://') + 3);
+    return midUrl.substring(0, pathStarts) + prov;
+}
+exports.getProvPath = getProvPath;
+async function getMidRoot(midUrl) {
+    let midData = await getMidData(midUrl);
+    let rootCert = midData["current-cert"];
+    expect((0, jwkeys_1.isLikeSignedKeyCert)(rootCert)).toBe(true);
+    return rootCert;
+}
+exports.getMidRoot = getMidRoot;
+async function startMidSession(loginUrl, userId) {
+    let reqOpts = {
+        url: loginUrl + login_1.startSession.URL_END,
+        method: 'POST',
+        responseType: 'json'
+    };
+    let req = { userId };
+    let rep = await (0, xhr_utils_1.doJsonRequest)(reqOpts, req);
+    expect(rep.status).toBe(login_1.startSession.SC.ok);
+    return rep.data.sessionId;
+}
+exports.startMidSession = startMidSession;
+async function provisionMidSigner(midServiceUrl, user) {
+    let provUrl = await getProvPath(midServiceUrl);
+    let sessParams = await (0, pkl_1.doPubKeyLogin)(provUrl, user);
+    let reqOpts = {
+        url: provUrl + provisioning_1.certify.URL_END,
+        method: 'POST',
+        sessionId: sessParams.sessionId,
+        responseType: 'arraybuffer'
+    };
+    let midSigningPair = mid_sigs_NaCl_Ed_1.user.generateSigningKeyPair(random_node_1.bytesSync);
+    let reqData = {
+        pkey: midSigningPair.pkey,
+        duration: 12 * 60 * 60
+    };
+    let encrBody = sessParams.sessEncr.packJSON(reqData);
+    let rep = await (0, xhr_utils_1.doBinaryRequest)(reqOpts, encrBody);
+    expect(rep.status).toBe(provisioning_1.certify.SC.ok);
+    let repData = sessParams.sessEncr.openJSON(rep.data);
+    return mid_sigs_NaCl_Ed_1.user.makeMailerIdSigner(midSigningPair.skey, repData.userCert, repData.provCert);
+}
+exports.provisionMidSigner = provisionMidSigner;
+async function doMailerIdLogin(loginUrl, user) {
+    let sessionId = await startMidSession(loginUrl, user.id);
+    let midSigner = await provisionMidSigner(user.midUrl, user);
+    let reqOpts = {
+        url: loginUrl + login_1.authSession.URL_END,
+        method: 'POST',
+        responseType: 'json',
+        sessionId
+    };
+    let serviceDomain = (0, url_1.parse)(loginUrl).hostname;
+    if (!serviceDomain) {
+        throw new Error(`Cannot parse hostname from login url ${loginUrl}`);
+    }
+    let req = {
+        assertion: midSigner.generateAssertionFor(serviceDomain, sessionId),
+        provCert: midSigner.providerCert,
+        userCert: midSigner.userCert
+    };
+    let rep = await (0, xhr_utils_1.doJsonRequest)(reqOpts, req);
+    expect(rep.status).toBe(login_1.authSession.SC.ok);
+    return sessionId;
+}
+exports.doMailerIdLogin = doMailerIdLogin;
+Object.freeze(exports);

package/build/tests/libs-for-tests/pkl.d.ts

@@ -0,0 +1,28 @@
+import * as pklApi from '../../lib-common/service-api/pub-key-login';
+import { SessionEncryptor } from '../../lib-common/session-encryptor';
+export interface User {
+    id: string;
+    loginDefaultSKey: Uint8Array;
+    loginLabeledSKey: {
+        kid: string;
+        k: Uint8Array;
+    };
+    midUrl: string;
+    storageOwnerUrl: string;
+}
+export interface ExchangeCrypto {
+    sessEncr: SessionEncryptor;
+    serverVerificationBytes: Uint8Array;
+    encResponse: Uint8Array;
+}
+export declare function decryptSessionParamsForCurve25519(r: pklApi.start.Reply, loginSKey: Uint8Array): ExchangeCrypto;
+export interface ExchangeParams {
+    crypto: ExchangeCrypto;
+    sessionId: string;
+}
+export declare function startPKLSession(loginUrl: string, user: User, useDefaultKey: boolean): Promise<ExchangeParams>;
+export interface SessionParams {
+    sessEncr: SessionEncryptor;
+    sessionId: string;
+}
+export declare function doPubKeyLogin(loginUrl: string, user: User): Promise<SessionParams>;

package/build/tests/libs-for-tests/pkl.js

@@ -0,0 +1,89 @@
+"use strict";
+/*
+ Copyright (C) 2016 3NSoft Inc.
+ 
+ This program is free software: you can redistribute it and/or modify it under
+ the terms of the GNU General Public License as published by the Free Software
+ Foundation, either version 3 of the License, or (at your option) any later
+ version.
+ 
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ See the GNU General Public License for more details.
+ 
+ You should have received a copy of the GNU General Public License along with
+ this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.doPubKeyLogin = exports.startPKLSession = exports.decryptSessionParamsForCurve25519 = void 0;
+const pklApi = require("../../lib-common/service-api/pub-key-login");
+const buffer_utils_1 = require("../../lib-common/buffer-utils");
+const ecma_nacl_1 = require("ecma-nacl");
+const session_encryptor_1 = require("../../lib-common/session-encryptor");
+const xhr_utils_1 = require("./xhr-utils");
+const url_1 = require("url");
+const bytes_equal_1 = require("./bytes-equal");
+function decryptSessionParamsForCurve25519(r, loginSKey) {
+    let serverPKey = buffer_utils_1.base64.open(r.serverPubKey);
+    expect(serverPKey.length).toBe(ecma_nacl_1.box.KEY_LENGTH);
+    let sharedKey = ecma_nacl_1.box.calc_dhshared_key(serverPKey, loginSKey);
+    let encChallenge = buffer_utils_1.base64.open(r.sessionKey);
+    expect(encChallenge.length).toBe(ecma_nacl_1.secret_box.NONCE_LENGTH + ecma_nacl_1.secret_box.KEY_LENGTH);
+    let nonce = encChallenge.subarray(0, ecma_nacl_1.secret_box.NONCE_LENGTH);
+    let zeros = new Uint8Array(ecma_nacl_1.secret_box.KEY_LENGTH);
+    let stream = ecma_nacl_1.secret_box.pack(zeros, nonce, sharedKey).subarray(ecma_nacl_1.secret_box.POLY_LENGTH);
+    let sessionKey = new Uint8Array(encChallenge.subarray(ecma_nacl_1.secret_box.NONCE_LENGTH));
+    for (var i = 0; i < ecma_nacl_1.secret_box.KEY_LENGTH; i += 1) {
+        sessionKey[i] ^= stream[i];
+    }
+    let serverVerificationBytes = ecma_nacl_1.secret_box.pack(sessionKey, nonce, sharedKey)
+        .subarray(0, ecma_nacl_1.secret_box.POLY_LENGTH);
+    ecma_nacl_1.nonce.advanceOddly(nonce);
+    let sessEncr = (0, session_encryptor_1.makeSessionEncryptor)(sessionKey, nonce);
+    let encResponse = sessEncr.pack(sessionKey);
+    ecma_nacl_1.arrays.wipe(sessionKey);
+    return { sessEncr, serverVerificationBytes, encResponse };
+}
+exports.decryptSessionParamsForCurve25519 = decryptSessionParamsForCurve25519;
+async function startPKLSession(loginUrl, user, useDefaultKey) {
+    let reqOpts = {
+        url: (0, url_1.resolve)(loginUrl, pklApi.start.URL_END),
+        method: 'POST',
+        responseType: 'json'
+    };
+    let req = (useDefaultKey ?
+        { userId: user.id } :
+        { userId: user.id, kid: user.loginLabeledSKey.kid });
+    let rep = await (0, xhr_utils_1.doJsonRequest)(reqOpts, req);
+    expect(rep.status).toBe(pklApi.start.SC.ok);
+    let skey = (useDefaultKey ? user.loginDefaultSKey : user.loginLabeledSKey.k);
+    return {
+        sessionId: rep.data.sessionId,
+        crypto: decryptSessionParamsForCurve25519(rep.data, skey)
+    };
+}
+exports.startPKLSession = startPKLSession;
+async function validatePKLSession(loginUrl, exchangeParams) {
+    let reqOpts = {
+        url: (0, url_1.resolve)(loginUrl, pklApi.complete.URL_END),
+        method: 'POST',
+        sessionId: exchangeParams.sessionId,
+        responseType: 'arraybuffer'
+    };
+    let rep = await (0, xhr_utils_1.doBinaryRequest)(reqOpts, exchangeParams.crypto.encResponse);
+    expect(rep.status).toBe(pklApi.complete.SC.ok);
+    expect(rep.data.length).toBe(ecma_nacl_1.secret_box.POLY_LENGTH);
+    expect((0, bytes_equal_1.bytesEqual)(rep.data, exchangeParams.crypto.serverVerificationBytes))
+        .toBe(true);
+    return {
+        sessionId: exchangeParams.sessionId,
+        sessEncr: exchangeParams.crypto.sessEncr
+    };
+}
+async function doPubKeyLogin(loginUrl, user) {
+    let exchangeParams = await startPKLSession(loginUrl, user, false);
+    return validatePKLSession(loginUrl, exchangeParams);
+}
+exports.doPubKeyLogin = doPubKeyLogin;
+Object.freeze(exports);

package/build/tests/libs-for-tests/server-components/3nstorage.d.ts

@@ -0,0 +1,20 @@
+import { Component } from './component';
+import { User } from '../pkl';
+import { Obj } from '../3nstorage';
+export declare class StorageComponent extends Component {
+    midServiceDomain: string;
+    constructor(signupDomains: string[], midServiceDomain: string);
+    addUser(userId: string, configureDNS?: boolean): Promise<User>;
+    get midUrl(): string;
+    get storageUrl(): string;
+    getStorageOwnerUrl(): Promise<string>;
+    private storeFolder;
+    private checkTransactionPresence;
+    rootTransactionExists(userId: string, transactionId?: string): Promise<boolean>;
+    transactionExists(userId: string, objId: string, transactionId?: string): Promise<boolean>;
+    private checkCurrentObjPresence;
+    currentRootObjExists(userId: string, ver?: number, obj?: Obj): Promise<boolean>;
+    currentObjExists(userId: string, objId: string, ver?: number, obj?: Obj): Promise<boolean>;
+    clearStorage(userId: string): Promise<void>;
+    restartAndClearStorageFor(userId: string): Promise<void>;
+}