discourse/spec/lib/webauthn/challenge_generator_spec.rb

# frozen_string_literal: true

RSpec.describe DiscourseWebauthn::ChallengeGenerator do
  it "generates a DiscourseWebauthn::ChallengeGenerator::ChallengeSession with correct params" do
    session = DiscourseWebauthn::ChallengeGenerator.generate
    expect(session).to be_a(DiscourseWebauthn::ChallengeGenerator::ChallengeSession)
    expect(session.challenge).not_to eq(nil)
    expect(session.rp_id).to eq(Discourse.current_hostname)
    expect(session.rp_name).to eq(SiteSetting.title)
  end

  describe "ChallengeSession" do
    describe "#commit_to_session" do
      let(:user) { Fabricate(:user) }

      it "stores the challenge, rp id, and rp name in the provided session object" do
        secure_session = {}
        generated_session = DiscourseWebauthn::ChallengeGenerator.generate
        generated_session.commit_to_session(secure_session, user)

        expect(secure_session["staged-webauthn-challenge-#{user&.id}"]).to eq(
          generated_session.challenge,
        )
        expect(secure_session["staged-webauthn-rp-id-#{user&.id}"]).to eq(generated_session.rp_id)
        expect(secure_session["staged-webauthn-rp-name-#{user&.id}"]).to eq(
          generated_session.rp_name,
        )
      end
    end
  end
end