beforeAll(() => { window.CBOR = require('../../node_modules/cbor-js/cbor.js') require('../../app/assets/javascripts/registerSecurityKey.js') // disable console.error() so we don't see it in test output // you might need to comment this out to debug some failures jest.spyOn(console, 'error').mockImplementation(() => {}) // populate missing values to allow consistent jest.spyOn() window.fetch = () => {} }) afterAll(() => { require('./support/teardown.js') // restore window attributes to their original undefined state delete window.fetch }) describe('Register security key', () => { let button beforeEach(() => { document.body.innerHTML = ` Register a key ` button = document.querySelector('[data-module="register-security-key"]') window.GOVUK.modules.start() }) test('creates a new credential and reloads', (done) => { // pretend window.navigator.credentials exists in test env // defineProperty is used as window.navigator is read-only Object.defineProperty(window.navigator, 'credentials', { value: { // fake PublicKeyCredential response from WebAuthn API // both of the nested properties are Array(Buffer) objects create: (options) => { expect(options).toEqual('options') return Promise.resolve({ response: { attestationObject: [1, 2, 3], clientDataJSON: [4, 5, 6], } }) } }, // allow global property to be redefined in other tests writable: true, }) // pretend window.location exists in test env // defineProperty is used as window.location is read-only Object.defineProperty(window, 'location', { // signal that the async promise chain was called value: { reload: () => done() }, // allow global property to be redefined in other tests writable: true, }) jest.spyOn(window, 'fetch').mockImplementation((_url, options = {}) => { // initial fetch of options from the server if (!options.method) { // options from the server are CBOR-encoded webauthnOptions = window.CBOR.encode('options') return Promise.resolve({ ok: true, arrayBuffer: () => webauthnOptions }) // subsequent POST of credential data to server } else { decodedData = window.CBOR.decode(options.body) expect(decodedData.clientDataJSON).toEqual(new Uint8Array([4,5,6])) expect(decodedData.attestationObject).toEqual(new Uint8Array([1,2,3])) expect(options.headers['X-CSRFToken']).toBe() return Promise.resolve({ ok: true }) } }) button.click() }) test.each([ ['network'], ['server'], ])('alerts if fetching WebAuthn options fails (%s error)', (errorType, done) => { jest.spyOn(window, 'fetch').mockImplementation((_url, options = {}) => { if (errorType == 'network') { return Promise.reject('error') } else { return Promise.resolve({ ok: false, statusText: 'error' }) } }) jest.spyOn(window, 'alert').mockImplementation((msg) => { expect(msg).toEqual('Error during registration.\n\nerror') done() }) button.click() }) test.each([ ['network'], ['server'], ])('alerts if sending WebAuthn credentials fails (%s error)', ({errorType}, done) => { Object.defineProperty(window.navigator, 'credentials', { value: { // fake PublicKeyCredential response from WebAuthn API create: (options) => { return Promise.resolve({ response: {} }) } }, // allow global property to be redefined in other tests writable: true, }) jest.spyOn(window, 'fetch').mockImplementation((_url, options = {}) => { // initial fetch of options from the server if (!options.method) { webauthnOptions = window.CBOR.encode('options') return Promise.resolve({ ok: true, arrayBuffer: () => webauthnOptions }) // subsequent POST of credential data to server } else { if (errorType == 'network') { return Promise.reject('error') } else { return Promise.resolve({ ok: false, statusText: 'error' }) } } }) jest.spyOn(window, 'alert').mockImplementation((msg) => { expect(msg).toEqual('Error during registration.\n\nerror') done() }) button.click() }) test('alerts if comms with the authenticator fails', (done) => { Object.defineProperty(window.navigator, 'credentials', { value: { create: () => { return Promise.reject(new DOMException('error')) } }, // allow global property to be redefined in other tests writable: true, }) jest.spyOn(window, 'fetch').mockImplementation((_url, options) => { // initial fetch of options from the server webauthnOptions = window.CBOR.encode('options') return Promise.resolve({ ok: true, arrayBuffer: () => webauthnOptions }) }) jest.spyOn(window, 'alert').mockImplementation((msg) => { expect(msg).toEqual('Error during registration.\n\nerror') done() }) button.click() }) })