openecomp-be/backend/openecomp-sdc-security-util/src/test/PasswordsTest.java

package org.onap.sdc.security;

import org.junit.Test;

import static org.junit.Assert.assertEquals;
import static org.junit.Assert.assertFalse;
import static org.junit.Assert.assertTrue;

public class PasswordsTest {

    @Test
    public void hashPassword() throws Exception {
        String hash = Passwords.hashPassword("hello1234");
        assertTrue(Passwords.isExpectedPassword("hello1234", hash));

        //test different salt-> result in different hash
        String hash2 = Passwords.hashPassword("hello1234");
        assertFalse(hash.equals(hash2));

        String hash3  = Passwords.hashPassword("");
        assertTrue(Passwords.isExpectedPassword("", hash3));

        String hash4  = Passwords.hashPassword(null);
        assertTrue(hash4 == null);
    }

    @Test
    public void isExpectedPassword() throws Exception {
        //region isExpectedPassword(String password, String salt, String hash)
        assertTrue(Passwords.isExpectedPassword(null, null, null));
        //valid hash
        assertTrue(Passwords.isExpectedPassword("hello1234", "e0277df331f4ff8f74752ac4a8fbe03b", "6dfbad308cdf53c9ff2ee2dca811ee92f1b359586b33027580e2ff92578edbd0"));
        //invalid salt
        assertFalse(Passwords.isExpectedPassword("hello1234", "c0000df331f4ff8f74752ac4a00be03c", "6dfbad308cdf53c9ff2ee2dca811ee92f1b359586b33027580e2ff92578edbd0"));
        assertFalse(Passwords.isExpectedPassword("hello1234", null, "6dfbad308cdf53c9ff2ee2dca811ee92f1b359586b33027580e2ff92578edbd0"));
        //exacly 1 param uninitialized
        assertFalse(Passwords.isExpectedPassword("hello1234", "", null));
        assertFalse(Passwords.isExpectedPassword(null, "", "hello1234"));
        //no salt & no hash
        assertFalse(Passwords.isExpectedPassword("hello1234", null, "hello1234"));
        //endregion

        //region isExpectedPassword(String password, String expectedHash)
        assertTrue(Passwords.isExpectedPassword(null, null));
        //valid hash
        assertTrue(Passwords.isExpectedPassword("hello1234", "e0277df331f4ff8f74752ac4a8fbe03b:6dfbad308cdf53c9ff2ee2dca811ee92f1b359586b33027580e2ff92578edbd0"));
        //invalid salt
        assertFalse(Passwords.isExpectedPassword("hello1234", "c0000df331f4ff8f74752ac4a00be03c:6dfbad308cdf53c9ff2ee2dca811ee92f1b359586b33027580e2ff92578edbd0"));
        //exacly 1 param uninitialized
        assertFalse(Passwords.isExpectedPassword("hello1234", null));
        assertFalse(Passwords.isExpectedPassword(null, "hello1234"));
        //no salt & no hash
        assertFalse(Passwords.isExpectedPassword("hello1234", "hello1234"));
        //endregion
    }

    @Test
    public void hashtest() {
        String password = "123456";
        String hash = Passwords.hashPassword(password);
        assertTrue(Passwords.isExpectedPassword(password, hash));
        password = "1sdfgsgd23456";
        hash = Passwords.hashPassword(password);
        assertTrue(Passwords.isExpectedPassword(password, hash));
        password = "1sdfgsgd2345((*&%$%6";
        hash = Passwords.hashPassword(password);
        assertTrue(Passwords.isExpectedPassword(password, hash));
        password = "";
        hash = Passwords.hashPassword(password);
        assertTrue(Passwords.isExpectedPassword(password, hash));
        password = " ";
        hash = Passwords.hashPassword(password);
        assertTrue(Passwords.isExpectedPassword(password, hash));
    }


}