Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(auth): [EMAIL MFA] Sign In / Confirm Sign In With MFA_SETUP #13760

Merged
merged 9 commits into from
Sep 6, 2024
Merged

feat(auth): [EMAIL MFA] Sign In / Confirm Sign In With MFA_SETUP #13760

Show file tree
Hide file tree
Changes from 4 commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
eeb8249
Sign In / Confirm Sign In With MFA_SETUP
jjarvisp Aug 27, 2024
79797f8
Sign In State Management Tests
jjarvisp Aug 28, 2024
9d0989d
Confirm Sign In Happy Path Tests
jjarvisp Aug 28, 2024
2cdfe15
Fix State Management Tests
jjarvisp Aug 28, 2024
33a98c8
Apply Feedback
jjarvisp Aug 28, 2024
847ccf1
loose email matching
jjarvisp Aug 28, 2024
22b877c
Remove Unnecessary Export
jjarvisp Aug 28, 2024
db166ef
Update SignInHelpers For Getting Allowed MFA Setup Types
jjarvisp Aug 28, 2024
b5e8fed
Add Error Case Unit Tests
jjarvisp Aug 28, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
244 changes: 243 additions & 1 deletion packages/auth/__tests__/providers/cognito/confirmSignInHappyCases.test.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ const authConfig = {

// getCurrentUser is mocked so Hub is able to dispatch a mocked AuthUser
// before returning an `AuthSignInResult`
const mockedGetCurrentUser = getCurrentUser as jest.Mock;
const mockedGetCurrentUser = jest.mocked(getCurrentUser);

describe('confirmSignIn API happy path cases', () => {
let handleChallengeNameSpy: jest.SpyInstance;
Expand Down Expand Up @@ -706,3 +706,245 @@ describe('Cognito ASF', () => {
);
});
});

describe('confirmSignIn MFA_SETUP challenge happy path cases', () => {
const { username, password } = authAPITestParams.user1;

test('confirmSignIn with multiple MFA_SETUP options using SOFTWARE_TOKEN_MFA', async () => {
Amplify.configure({
Auth: authConfig,
});
jest
.spyOn(signInHelpers, 'handleUserSRPAuthFlow')
.mockImplementationOnce(
async (): Promise<RespondToAuthChallengeCommandOutput> =>
authAPITestParams.RespondToAuthChallengeMultipleMfaSetupOutput,
);

const result = await signIn({ username, password });

expect(result.isSignedIn).toBe(false);
expect(result.nextStep.signInStep).toBe(
'CONTINUE_SIGN_IN_WITH_MFA_SETUP_SELECTION',
);

jest.spyOn(clients, 'associateSoftwareToken').mockResolvedValueOnce({
SecretCode: 'secret-code',
Session: '12341234',
$metadata: {},
});

const selectMfaToSetupConfirmSignInResult = await confirmSignIn({
challengeResponse: 'TOTP',
});

expect(selectMfaToSetupConfirmSignInResult.isSignedIn).toBe(false);
expect(selectMfaToSetupConfirmSignInResult.nextStep.signInStep).toBe(
'CONTINUE_SIGN_IN_WITH_TOTP_SETUP',
);

const verifySoftwareTokenSpy = jest
.spyOn(clients, 'verifySoftwareToken')
.mockResolvedValueOnce({
Session: '12341234',
Status: 'SUCCESS',
$metadata: {},
});

jest
.spyOn(clients, 'respondToAuthChallenge')
.mockImplementationOnce(
async (): Promise<RespondToAuthChallengeCommandOutput> =>
authAPITestParams.RespondToAuthChallengeCommandOutput,
);

const totpCode = '123456';
const confirmSignInResult = await confirmSignIn({
challengeResponse: totpCode,
});

expect(verifySoftwareTokenSpy).toHaveBeenCalledWith(
expect.objectContaining({
region: 'us-west-2',
}),
expect.objectContaining({
UserCode: totpCode,
Session: '12341234',
}),
);
expect(confirmSignInResult.isSignedIn).toBe(true);
expect(confirmSignInResult.nextStep.signInStep).toBe('DONE');
});

test('confirmSignIn with multiple MFA_SETUP options using EMAIL_OTP', async () => {
Amplify.configure({
Auth: authConfig,
});

jest
.spyOn(signInHelpers, 'handleUserSRPAuthFlow')
.mockImplementationOnce(
async (): Promise<RespondToAuthChallengeCommandOutput> =>
authAPITestParams.RespondToAuthChallengeMultipleMfaSetupOutput,
);

const result = await signIn({ username, password });

expect(result.isSignedIn).toBe(false);
expect(result.nextStep.signInStep).toBe(
'CONTINUE_SIGN_IN_WITH_MFA_SETUP_SELECTION',
);

const selectMfaToSetupConfirmSignInResult = await confirmSignIn({
challengeResponse: 'EMAIL',
});

expect(selectMfaToSetupConfirmSignInResult.isSignedIn).toBe(false);
expect(selectMfaToSetupConfirmSignInResult.nextStep.signInStep).toBe(
'CONTINUE_SIGN_IN_WITH_EMAIL_SETUP',
);

jest.spyOn(signInHelpers, 'handleChallengeName').mockImplementationOnce(
async (): Promise<RespondToAuthChallengeCommandOutput> => ({
ChallengeName: 'EMAIL_OTP',
Session: '1234234232',
$metadata: {},
ChallengeParameters: {
CODE_DELIVERY_DELIVERY_MEDIUM: 'EMAIL',
CODE_DELIVERY_DESTINATION: 'j***@a***',
},
}),
);

const setupEmailConfirmSignInResult = await confirmSignIn({
challengeResponse: 'j***@a***',
});

expect(setupEmailConfirmSignInResult.nextStep.signInStep).toBe(
'CONFIRM_SIGN_IN_WITH_EMAIL_CODE',
);

jest
.spyOn(signInHelpers, 'handleChallengeName')
.mockImplementationOnce(
async (): Promise<RespondToAuthChallengeCommandOutput> =>
authAPITestParams.RespondToAuthChallengeCommandOutput,
);

const confirmSignInResult = await confirmSignIn({
challengeResponse: '123456',
});

expect(confirmSignInResult.isSignedIn).toBe(true);
expect(confirmSignInResult.nextStep.signInStep).toBe('DONE');
});

test('confirmSignIn with single MFA_SETUP option using EMAIL_OTP', async () => {
Amplify.configure({
Auth: authConfig,
});

jest
.spyOn(signInHelpers, 'handleUserSRPAuthFlow')
.mockImplementationOnce(
async (): Promise<RespondToAuthChallengeCommandOutput> =>
authAPITestParams.RespondToAuthChallengeEmailMfaSetupOutput,
);

const result = await signIn({ username, password });

expect(result.isSignedIn).toBe(false);
expect(result.nextStep.signInStep).toBe(
'CONTINUE_SIGN_IN_WITH_EMAIL_SETUP',
);

jest.spyOn(signInHelpers, 'handleChallengeName').mockImplementationOnce(
async (): Promise<RespondToAuthChallengeCommandOutput> => ({
ChallengeName: 'EMAIL_OTP',
Session: '1234234232',
$metadata: {},
ChallengeParameters: {
CODE_DELIVERY_DELIVERY_MEDIUM: 'EMAIL',
CODE_DELIVERY_DESTINATION: 'j***@a***',
},
}),
);

const setupEmailConfirmSignInResult = await confirmSignIn({
challengeResponse: 'j***@a***',
});

expect(setupEmailConfirmSignInResult.nextStep.signInStep).toBe(
'CONFIRM_SIGN_IN_WITH_EMAIL_CODE',
);

jest
.spyOn(signInHelpers, 'handleChallengeName')
.mockImplementationOnce(
async (): Promise<RespondToAuthChallengeCommandOutput> =>
authAPITestParams.RespondToAuthChallengeCommandOutput,
);

const confirmSignInResult = await confirmSignIn({
challengeResponse: '123456',
});

expect(confirmSignInResult.isSignedIn).toBe(true);
expect(confirmSignInResult.nextStep.signInStep).toBe('DONE');
});

test('confirmSignIn with single MFA_SETUP option using SOFTWARE_TOKEN_MFA', async () => {
Amplify.configure({
Auth: authConfig,
});
jest
.spyOn(signInHelpers, 'handleUserSRPAuthFlow')
.mockImplementationOnce(
async (): Promise<RespondToAuthChallengeCommandOutput> =>
authAPITestParams.RespondToAuthChallengeTotpMfaSetupOutput,
);

jest.spyOn(clients, 'associateSoftwareToken').mockResolvedValueOnce({
SecretCode: 'secret-code',
Session: '12341234',
$metadata: {},
});

const result = await signIn({ username, password });

expect(result.isSignedIn).toBe(false);
expect(result.nextStep.signInStep).toBe('CONTINUE_SIGN_IN_WITH_TOTP_SETUP');

const verifySoftwareTokenSpy = jest
.spyOn(clients, 'verifySoftwareToken')
.mockResolvedValueOnce({
Session: '12341234',
Status: 'SUCCESS',
$metadata: {},
});

jest
.spyOn(clients, 'respondToAuthChallenge')
.mockImplementationOnce(
async (): Promise<RespondToAuthChallengeCommandOutput> =>
authAPITestParams.RespondToAuthChallengeCommandOutput,
);

const totpCode = '123456';
const confirmSignInResult = await confirmSignIn({
challengeResponse: totpCode,
});

expect(verifySoftwareTokenSpy).toHaveBeenCalledWith(
expect.objectContaining({
region: 'us-west-2',
}),
expect.objectContaining({
UserCode: totpCode,
Session: '12341234',
}),
);
expect(confirmSignInResult.isSignedIn).toBe(true);
expect(confirmSignInResult.nextStep.signInStep).toBe('DONE');
});
});
Loading
Loading