Revision control
Copy as Markdown
Other Tools
/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this file,
/**
* Tests parsing of the APOP timestamp from the POP3 greeting. With an
* encrypted password and no SASL methods advertised, the client sends APOP if
* it found a timestamp, and AUTH CRAM-MD5 otherwise.
*/
var { PromiseTestUtils } = ChromeUtils.importESModule(
);
// The kStateTransaction state of the fake server, i.e. authenticated.
const kStateTransaction = 3;
var gServer;
var gIncomingServer;
var gGreeting;
add_setup(function () {
gServer = new nsMailServer(daemon => {
const handler = new POP3_RFC5034_handler(daemon);
// Accept CRAM-MD5 without advertising any SASL methods in CAPA.
handler.kAuthSchemes = ["CRAM-MD5"];
handler.capaAdditions = () => "";
handler.APOP = function () {
this._state = kStateTransaction;
return "+OK";
};
const onStartup = handler.onStartup;
handler.onStartup = function () {
onStartup.call(this);
return gGreeting;
};
return handler;
}, new Pop3Daemon());
gServer.start();
gIncomingServer = createPop3ServerAndLocalFolders(gServer.port);
gIncomingServer.authMethod = Ci.nsMsgAuthMethod.passwordEncrypted;
registerCleanupFunction(() => {
gServer.stop();
});
});
/**
* Connect with the given greeting and check the authentication command sent.
*
* @param {string} greeting - The greeting the server sends.
* @param {string} expectedAuth - The authentication command expected.
*/
async function checkAuthCommand(greeting, expectedAuth) {
gGreeting = greeting;
gServer.resetTest();
gIncomingServer.closeCachedConnections();
const urlListener = new PromiseTestUtils.PromiseUrlListener();
MailServices.pop3.GetNewMail(
null,
urlListener,
localAccountUtils.inboxFolder,
gIncomingServer
);
await urlListener.promise;
do_check_transaction(gServer.playTransaction(), [
"CAPA",
expectedAuth,
"STAT",
]);
}
add_task(async function testTimestamp() {
// MD5 of "<1896.697170952@dbc.mtview.ca.us>wilma".
await checkAuthCommand(
"+OK POP3 server ready <1896.697170952@dbc.mtview.ca.us>",
"APOP fred 4a25ddaca298245cfadd76aa64bb2407"
);
});
add_task(async function testTimestampFollowedByAngleBrackets() {
// MD5 of "<1@a.b>wilma".
await checkAuthCommand(
"APOP fred 643842af5929c053d71b5abf11aab6f4"
);
});
add_task(async function testNonAsciiTimestamp() {
// MD5 of "<1@a.b>wilma".
await checkAuthCommand(
"+OK hi <\xFC@x> <1@a.b>",
"APOP fred 643842af5929c053d71b5abf11aab6f4"
);
});
add_task(async function testNoTimestamp() {
await checkAuthCommand("+OK Fake POP3 server ready", "AUTH CRAM-MD5");
});
add_task(async function testUnterminatedTimestamps() {
for (const greeting of [
"+OK <" + "@".repeat(200000),
"+OK <" + "a@".repeat(100000),
"+OK " + "<".repeat(200000) + "a@b",
]) {
await checkAuthCommand(greeting, "AUTH CRAM-MD5");
}
});