997cda01a8
- Mailer::send mit Retry (2 Versuche); SMTP-Test & Templates waren bereits da - admin/vouchers.php: Code per E-Mail (erneut) versenden (ajax_resend) - Tageslimit Voucher pro Nicht-Admin-Benutzer (Setting + Durchsetzung in index) - Docker: HEALTHCHECK (health.php) + curl; GHCR-Publish-Workflow - Setting user_daily_voucher_limit + enforce in integrations.php
46 lines
1.5 KiB
PHP
46 lines
1.5 KiB
PHP
<?php
|
|
namespace Tests;
|
|
|
|
use PHPUnit\Framework\TestCase;
|
|
|
|
require_once __DIR__ . '/../includes/Totp.php';
|
|
|
|
final class TotpTest extends TestCase
|
|
{
|
|
/** RFC 6238 Testvektoren (SHA1, 6 Stellen, Seed "12345678901234567890"). */
|
|
public function testRfc6238Vectors(): void
|
|
{
|
|
$secret = 'GEZDGNBVGY3TQOJQGEZDGNBVGY3TQOJQ'; // Base32 des RFC-Seeds
|
|
$this->assertSame('287082', \Totp::code($secret, intdiv(59, 30)));
|
|
$this->assertSame('081804', \Totp::code($secret, intdiv(1111111109, 30)));
|
|
$this->assertSame('005924', \Totp::code($secret, intdiv(1234567890, 30)));
|
|
}
|
|
|
|
public function testVerifyAcceptsCurrentCode(): void
|
|
{
|
|
$secret = \Totp::generateSecret();
|
|
$code = \Totp::code($secret);
|
|
$this->assertTrue(\Totp::verify($secret, $code));
|
|
}
|
|
|
|
public function testVerifyRejectsWrongCode(): void
|
|
{
|
|
$secret = \Totp::generateSecret();
|
|
$wrong = \Totp::code($secret) === '000000' ? '111111' : '000000';
|
|
$this->assertFalse(\Totp::verify($secret, $wrong));
|
|
}
|
|
|
|
public function testVerifyRejectsMalformed(): void
|
|
{
|
|
$secret = \Totp::generateSecret();
|
|
$this->assertFalse(\Totp::verify($secret, 'abcdef'));
|
|
$this->assertFalse(\Totp::verify($secret, '12345'));
|
|
}
|
|
|
|
public function testProvisioningUri(): void
|
|
{
|
|
$uri = \Totp::provisioningUri('ABC', 'user@example.com', 'My App');
|
|
$this->assertStringStartsWith('otpauth://totp/', $uri);
|
|
$this->assertStringContainsString('secret=ABC', $uri);
|
|
}
|
|
}
|