Add tests for login

This commit is contained in:
Pim Kunis 2021-07-13 23:16:56 +02:00
parent 6b9c9333b8
commit 585de861d6
4 changed files with 94 additions and 34 deletions

View file

@ -4,7 +4,7 @@ defmodule MatrixServer.Account do
import Ecto.{Changeset, Query}
alias MatrixServer.{Repo, Account, Device}
alias MatrixServerWeb.API.Register
alias MatrixServerWeb.API.{Register, Login}
alias Ecto.Multi
@max_mxid_length 255
@ -53,17 +53,20 @@ defmodule MatrixServer.Account do
|> Multi.run(:device_with_access_token, &Device.insert_new_access_token/2)
end
def login(%{localpart: localpart, password: password} = params) do
def login(%Login{} = api) do
localpart = try_get_localpart(api.identifier.user)
fn repo ->
case repo.one(from a in Account, where: a.localpart == ^localpart) do
%Account{password_hash: hash} = account ->
if Bcrypt.verify_pass(password, hash) do
device_id = Map.get(params, :device_id, Device.generate_device_id(localpart))
access_token = Device.generate_access_token(localpart, device_id)
if Bcrypt.verify_pass(api.password, hash) do
case Device.login(api, account) do
{:ok, device} ->
device
case Device.login(account, device_id, access_token, params) do
{:ok, device} -> device
{:error, _cs} -> repo.rollback(:forbidden)
{:error, _cs} ->
IO.inspect(_cs)
repo.rollback(:forbidden)
end
else
repo.rollback(:forbidden)
@ -97,4 +100,13 @@ defmodule MatrixServer.Account do
# Subtract the "@" and ":" in the MXID.
@max_mxid_length - 2 - String.length(MatrixServer.server_name())
end
defp try_get_localpart("@" <> rest = user_id) do
case String.split(rest, ":") do
[localpart, _] -> localpart
_ -> user_id
end
end
defp try_get_localpart(localpart), do: localpart
end

View file

@ -4,6 +4,7 @@ defmodule MatrixServer.Device do
import Ecto.{Changeset, Query}
alias MatrixServer.{Account, Device, Repo}
alias MatrixServerWeb.API.Login
@primary_key false
schema "devices" do
@ -49,22 +50,29 @@ defmodule MatrixServer.Device do
"#{localpart}_#{time_string}"
end
def login(account, device_id, access_token, params) do
def login(%Login{} = api, account) do
device_id = api.device_id || generate_device_id(account.localpart)
access_token = generate_access_token(account.localpart, device_id)
update_query =
from(d in Device)
|> update(set: [access_token: ^access_token, device_id: ^device_id])
|> then(fn q ->
if api.initial_device_display_name do
update(q, set: [display_name: ^api.initial_device_display_name])
else
q
end
end)
update_query =
if params[:display_name] != nil do
update(update_query, set: [display_name: ^params.display_name])
else
update_query
end
device_params = %{
device_id: device_id,
display_name: api.initial_device_display_name
}
Ecto.build_assoc(account, :devices)
|> Map.put(:device_id, device_id)
|> Map.put(:access_token, access_token)
|> Device.changeset(params)
|> Device.changeset(device_params)
|> put_change(:access_token, access_token)
|> Repo.insert(on_conflict: update_query, conflict_target: [:localpart, :device_id])
end
end