Revision control
Copy as Markdown
Other Tools
/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this file,
/**
* Tests that non-ASCII user names and passwords end up UTF-8 encoded in the
* SASL tokens we send, see rfc4616#section-2.
*/
const { SmtpAuthenticator } = ChromeUtils.importESModule(
);
// "u<U+00FC>ser<U+20AC>" and "p<U+00E4>ss<U+20AC>", the euro sign making them
// unrepresentable in Latin-1.
const kUsername = "üser€";
const kPassword = "päss€";
const kUsernameUtf8 = "\xc3\xbcser\xe2\x82\xac";
const kPasswordUtf8 = "p\xc3\xa4ss\xe2\x82\xac";
// Same, but representable in Latin-1.
const kLatin1Username = "üser";
const kLatin1Password = "päss";
function createAuthenticator(username, password) {
const server = getBasicSmtpServer();
server.username = username;
server.password = password;
return new SmtpAuthenticator(server);
}
registerCleanupFunction(() => {
Services.prefs.clearUserPref("mail.smtp_login_pop3_user_pass_auth_is_latin1");
});
add_task(function testPlainToken() {
const authenticator = createAuthenticator(kUsername, kPassword);
Assert.equal(
authenticator.getPlainToken(),
btoa(`\0${kUsernameUtf8}\0${kPasswordUtf8}`),
"AUTH PLAIN should send the user name and password as UTF-8"
);
});
add_task(function testCramMd5TokenUserName() {
const authenticator = createAuthenticator(kUsername, kPassword);
const token = authenticator.getCramMd5Token(
kPassword,
btoa("<1234@localhost>")
);
Assert.equal(
atob(token).split(" ")[0],
kUsernameUtf8,
"AUTH CRAM-MD5 should send the user name as UTF-8"
);
});
/**
* LOGIN auth is not standardized, so
* `mail.smtp_login_pop3_user_pass_auth_is_latin1` keeps sending Latin-1 for
* credentials which fit into Latin-1.
*/
add_task(function testLoginTokenLatin1() {
Services.prefs.setBoolPref(
"mail.smtp_login_pop3_user_pass_auth_is_latin1",
true
);
const authenticator = createAuthenticator(kLatin1Username, kLatin1Password);
Assert.equal(
authenticator.getLoginUsernameToken(),
btoa("\xfcser"),
"AUTH LOGIN should send the Latin-1 user name as Latin-1"
);
Assert.equal(
authenticator.getLoginPasswordToken(kLatin1Password),
btoa("p\xe4ss"),
"AUTH LOGIN should send the Latin-1 password as Latin-1"
);
});
add_task(function testLoginTokenLatin1PrefOff() {
Services.prefs.setBoolPref(
"mail.smtp_login_pop3_user_pass_auth_is_latin1",
false
);
const authenticator = createAuthenticator(kLatin1Username, kLatin1Password);
Assert.equal(
authenticator.getLoginUsernameToken(),
btoa("\xc3\xbcser"),
"AUTH LOGIN should send the user name as UTF-8"
);
Assert.equal(
authenticator.getLoginPasswordToken(kLatin1Password),
btoa("p\xc3\xa4ss"),
"AUTH LOGIN should send the password as UTF-8"
);
});
/**
* Credentials which don't fit into Latin-1 must be sent as UTF-8 regardless of
* the pref, since there is no other way to encode them.
*/
add_task(function testLoginTokenNonLatin1() {
Services.prefs.setBoolPref(
"mail.smtp_login_pop3_user_pass_auth_is_latin1",
true
);
const authenticator = createAuthenticator(kUsername, kPassword);
Assert.equal(
authenticator.getLoginUsernameToken(),
btoa(kUsernameUtf8),
"AUTH LOGIN should send the non-Latin-1 user name as UTF-8"
);
Assert.equal(
authenticator.getLoginPasswordToken(kPassword),
btoa(kPasswordUtf8),
"AUTH LOGIN should send the non-Latin-1 password as UTF-8"
);
});