wneessen/go-mail
1
1
Fork 0
mirror of https://github.com/wneessen/go-mail.git synced 2024-12-18 17:00:38 +01:00
Code Issues Projects Releases Packages Wiki Activity

Add support for SCRAM-SHA authentication mechanisms

Browse source 
Introduced new test cases for SCRAM-SHA-1, SCRAM-SHA-256, and their PLUS variants in `smtp_test.go`. Updated the authTest structure to include a `hasNonce` flag and implemented logic to handle nonce validation and success message processing.
This commit is contained in:
Winni Neessen 2024-10-02 18:02:46 +02:00
parent e4dd62475a
commit a8e89a1258
Signed by: wneessen
GPG key ID: 385AC9889632126E
1 changed files with 67 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

67
smtp/smtp_test.go
View file

@ -38,6 +38,7 @@ type authTest struct {
name string name string
responses []string responses []string
sf []bool sf []bool
hasNonce bool
} }
var authTests = []authTest{ var authTests = []authTest{
@ -47,6 +48,7 @@ var authTests = []authTest{
"PLAIN", "PLAIN",
[]string{"\x00user\x00pass"}, []string{"\x00user\x00pass"},
[]bool{false, false}, []bool{false, false},
false,
}, },
{ {
PlainAuth("foo", "bar", "baz", "testserver"), PlainAuth("foo", "bar", "baz", "testserver"),
@ -54,6 +56,15 @@ var authTests = []authTest{
"PLAIN", "PLAIN",
[]string{"foo\x00bar\x00baz"}, []string{"foo\x00bar\x00baz"},
[]bool{false, false}, []bool{false, false},
false,
},
{
PlainAuth("foo", "bar", "baz", "testserver"),
[]string{"foo"},
"PLAIN",
[]string{"foo\x00bar\x00baz", ""},
[]bool{true},
false,
}, },
{ {
LoginAuth("user", "pass", "testserver"), LoginAuth("user", "pass", "testserver"),
@ -61,6 +72,7 @@ var authTests = []authTest{
"LOGIN", "LOGIN",
[]string{"", "user", "pass"}, []string{"", "user", "pass"},
[]bool{false, false}, []bool{false, false},
false,
}, },
{ {
LoginAuth("user", "pass", "testserver"), LoginAuth("user", "pass", "testserver"),
@ -68,6 +80,7 @@ var authTests = []authTest{
"LOGIN", "LOGIN",
[]string{"", "user", "pass"}, []string{"", "user", "pass"},
[]bool{false, false}, []bool{false, false},
false,
}, },
{ {
LoginAuth("user", "pass", "testserver"), LoginAuth("user", "pass", "testserver"),
@ -75,6 +88,7 @@ var authTests = []authTest{
"LOGIN", "LOGIN",
[]string{"", "user", "pass"}, []string{"", "user", "pass"},
[]bool{false, false}, []bool{false, false},
false,
}, },
{ {
LoginAuth("user", "pass", "testserver"), LoginAuth("user", "pass", "testserver"),
@ -82,6 +96,7 @@ var authTests = []authTest{
"LOGIN", "LOGIN",
[]string{"", "user", "pass", ""}, []string{"", "user", "pass", ""},
[]bool{false, false, true}, []bool{false, false, true},
false,
}, },
{ {
CRAMMD5Auth("user", "pass"), CRAMMD5Auth("user", "pass"),
@ -89,6 +104,7 @@ var authTests = []authTest{
"CRAM-MD5", "CRAM-MD5",
[]string{"", "user 287eb355114cf5c471c26a875f1ca4ae"}, []string{"", "user 287eb355114cf5c471c26a875f1ca4ae"},
[]bool{false, false}, []bool{false, false},
false,
}, },
{ {
XOAuth2Auth("username", "token"), XOAuth2Auth("username", "token"),
@ -96,6 +112,47 @@ var authTests = []authTest{
"XOAUTH2", "XOAUTH2",
[]string{"user=username\x01auth=Bearer token\x01\x01", ""}, []string{"user=username\x01auth=Bearer token\x01\x01", ""},
[]bool{false}, []bool{false},
false,
},
{
ScramSHA1Auth("username", "password"),
[]string{"", "r=foo"},
"SCRAM-SHA-1",
[]string{"", "n,,n=username,r=", ""},
[]bool{false, true},
true,
},
{
ScramSHA1Auth("username", "password"),
[]string{"", "v=foo"},
"SCRAM-SHA-1",
[]string{"", "n,,n=username,r=", ""},
[]bool{false, true},
true,
},
{
ScramSHA256Auth("username", "password"),
[]string{""},
"SCRAM-SHA-256",
[]string{"", "n,,n=username,r=", ""},
[]bool{false},
true,
},
{
ScramSHA1PlusAuth("username", "password", nil),
[]string{""},
"SCRAM-SHA-1-PLUS",
[]string{"", "", ""},
[]bool{true},
true,
},
{
ScramSHA256PlusAuth("username", "password", nil),
[]string{""},
"SCRAM-SHA-256-PLUS",
[]string{"", "", ""},
[]bool{true},
true,
}, },
} }
@ -121,10 +178,20 @@ testLoop:
t.Errorf("#%d error: %s", i, err) t.Errorf("#%d error: %s", i, err)
continue testLoop continue testLoop
} }
if test.hasNonce {
if !bytes.HasPrefix(resp, expected) {
t.Errorf("#%d got response: %s, expected response to start with: %s", i, resp, expected)
}
continue testLoop
}
if !bytes.Equal(resp, expected) { if !bytes.Equal(resp, expected) {
t.Errorf("#%d got %s, expected %s", i, resp, expected) t.Errorf("#%d got %s, expected %s", i, resp, expected)
continue testLoop continue testLoop
} }
_, err = test.auth.Next([]byte("2.7.0 Authentication successful"), false)
if err != nil {
t.Errorf("#%d success message error: %s", i, err)
}
} }
} }
} }