mirror of
https://github.com/Such-Software/wownerogue.git
synced 2026-10-17 14:21:25 +02:00
jwinterm
fad2a695bd
A browser-based roguelike synchronized with crypto block timing. A run is a race against the next block: reach the exit before the block lands, or the house wins. The same codebase runs the solo dungeon, the social Tavern, and operator-selected PvP and race rulesets, with separate free and paid leaderboards. Self-hostable under the MIT License. See README.md to run it, docs/ARCHITECTURE.md for the design, and docs/DEPLOY.md to operate an instance.
32 lines
1.4 KiB
JavaScript
32 lines
1.4 KiB
JavaScript
const { DigestAuthClient, parseDigestChallenge } = require('../src/payments/digestAuth');
|
|
|
|
describe('wallet RPC Digest authentication', () => {
|
|
test('parses quoted qop lists and required fields', () => {
|
|
expect(parseDigestChallenge('Digest realm="wallet", nonce="n1", qop="auth,auth-int", algorithm=MD5'))
|
|
.toMatchObject({ realm: 'wallet', nonce: 'n1', qop: 'auth,auth-int', algorithm: 'MD5' });
|
|
});
|
|
|
|
test('caches the challenge and increments nonce-count without another unauthenticated probe', async () => {
|
|
const unauthorized = new Error('unauthorized');
|
|
unauthorized.response = {
|
|
status: 401,
|
|
headers: { 'www-authenticate': 'Digest realm="wallet", nonce="nonce", qop="auth"' }
|
|
};
|
|
const http = { post: jest.fn()
|
|
.mockRejectedValueOnce(unauthorized)
|
|
.mockResolvedValue({ data: { result: {} } }) };
|
|
const client = new DigestAuthClient(http, {
|
|
username: 'user',
|
|
password: 'pass',
|
|
randomBytes: () => Buffer.alloc(16, 1)
|
|
});
|
|
|
|
await client.post('http://127.0.0.1:38083/json_rpc', { id: '1' });
|
|
await client.post('http://127.0.0.1:38083/json_rpc', { id: '2' });
|
|
|
|
expect(http.post).toHaveBeenCalledTimes(3);
|
|
expect(http.post.mock.calls[1][2].headers.Authorization).toContain('nc=00000001');
|
|
expect(http.post.mock.calls[2][2].headers.Authorization).toContain('nc=00000002');
|
|
});
|
|
});
|