Source code
Revision control
Copy as Markdown
Other Tools
Test Info:
/* Any copyright is dedicated to the Public Domain.
"use strict";
// relocking the token nothing is declined. The NS_ERROR_ABORT translation they
// check still applies to a user cancel, so keep coverage of that.
//
// LoginHelper.requestReauth() logs the internal key token out before prompting
// for the primary password again, so a store operation racing with it used to
// open a second prompt stacked on top of the first one.
add_task(async function test_single_prompt_when_storage_races_reauth() {
if (!Services.prefs.getBoolPref("signon.storage.rust.active", false)) {
// With the JSON backend NSS suppresses the second prompt on its own.
info("Rust logins backend is not active, nothing to test here.");
return;
}
await Services.logins.addLoginAsync(
LoginTestUtils.testData.formLogin({
username: "username",
password: "password",
})
);
await LoginTestUtils.primaryPassword.enable();
let dialogCount = 0;
const observer = subject => {
dialogCount++;
const dialog = subject.Dialog;
SpecialPowers.wrap(dialog.ui.password1Textbox).setUserInput(
LoginTestUtils.primaryPassword.primaryPassword
);
dialog.ui.button0.click();
};
Services.obs.addObserver(observer, "common-dialog-loaded");
registerCleanupFunction(async () => {
Services.obs.removeObserver(observer, "common-dialog-loaded");
await LoginTestUtils.primaryPassword.disable();
});
const reauth = LoginHelper.requestReauth(
gBrowser.selectedBrowser,
0,
"",
"",
"test"
);
// This needs the key that requestReauth is about to lock.
const logins = Services.logins.getAllLogins().then(
() => null,
e => e
);
const [{ isAuthorized }, loginsError] = await Promise.all([reauth, logins]);
Assert.ok(isAuthorized, "Re-authentication succeeded");
Assert.equal(dialogCount, 1, "Only one primary password prompt was shown");
if (loginsError) {
Assert.equal(
loginsError.result,
Cr.NS_ERROR_ABORT,
"A store read declined during the re-auth reports NS_ERROR_ABORT"
);
}
});
// A store operation declined during the re-auth has to report NS_ERROR_ABORT,
// the way crypto-SDR does, and not a raw Rust "Encryption key is missing".
// Writes used to leak the raw error, so a password the user asked to save was
// silently not saved.
add_task(async function test_declined_write_reports_abort() {
if (!Services.prefs.getBoolPref("signon.storage.rust.active", false)) {
info("Rust logins backend is not active, nothing to test here.");
return;
}
await LoginTestUtils.primaryPassword.enable();
const observer = subject => {
const dialog = subject.Dialog;
SpecialPowers.wrap(dialog.ui.password1Textbox).setUserInput(
LoginTestUtils.primaryPassword.primaryPassword
);
dialog.ui.button0.click();
};
Services.obs.addObserver(observer, "common-dialog-loaded");
registerCleanupFunction(async () => {
Services.obs.removeObserver(observer, "common-dialog-loaded");
await LoginTestUtils.primaryPassword.disable();
});
const reauth = LoginHelper.requestReauth(
gBrowser.selectedBrowser,
0,
"",
"",
"test"
);
const added = Services.logins
.addLoginAsync(
LoginTestUtils.testData.formLogin({
username: "other",
password: "password",
})
)
.then(
() => null,
e => e
);
const [, addError] = await Promise.all([reauth, added]);
if (addError) {
Assert.equal(
addError.result,
Cr.NS_ERROR_ABORT,
"A declined write reports NS_ERROR_ABORT, not a raw Rust error"
);
} else {
info("The write did not race the re-auth this time; nothing to assert.");
}
});