misc_test.go

package otp

import (
	"encoding/base32"
	"fmt"
	"testing"

	"github.com/stretchr/testify/assert"
)

func TestHMACSHA1(t *testing.T) {
	secret := `12345678901234567890`
	table := map[uint64]string{
		0: `cc93cf18508d94934c64b65d8ba7667fb7cde4b0`,
		1: `75a48a19d4cbe100644e8ac1397eea747a2d33ab`,
		2: `0bacb7fa082fef30782211938bc1c5e70416ff44`,
		3: `66c28227d03a2d5529262ff016a1e6ef76557ece`,
		4: `a904c900a64b35909874b33e61c5938a8e15ed1c`,
		5: `a37e783d7b7233c083d4f62926c7a25f238d0316`,
		6: `bc9cd28561042c83f219324d3c607256c03272ae`,
		7: `a4fb960c0bc06e1eabb804e5b397cdc4b45596fa`,
		8: `1b3c89f65e6c9e883012052823443f048b4332db`,
		9: `1637409809a679dc698207310c8c7fc07290d9e5`,
	}

	for cnt, expected := range table {
		result := hmacSHA1([]byte(secret), counterToBytes(cnt))
		assert.Equal(t, expected, fmt.Sprintf("%x", result))
	}
}

func TestGenerateRandomSecret(t *testing.T) {
	// Brute force test to check if the returned string is
	// a valid Base32 string.
	for i := 0; i < 1000; i++ {
		secret := generateRandomSecret(20, true)
		_, err := base32.StdEncoding.DecodeString(secret)
		assert.Nil(t, err)
	}
}