OLD | NEW |
(Empty) | |
| 1 // Copyright 2017 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. |
| 4 |
| 5 #include "chromeos/dbus/biod/fake_biod_client.h" |
| 6 |
| 7 #include "base/bind.h" |
| 8 #include "base/macros.h" |
| 9 #include "base/strings/string_util.h" |
| 10 #include "base/test/test_simple_task_runner.h" |
| 11 #include "base/threading/thread_task_runner_handle.h" |
| 12 #include "chromeos/dbus/biod/test_utils.h" |
| 13 #include "dbus/object_path.h" |
| 14 #include "testing/gtest/include/gtest/gtest.h" |
| 15 |
| 16 using namespace biod; |
| 17 |
| 18 namespace chromeos { |
| 19 |
| 20 namespace { |
| 21 |
| 22 const char kTestUserId[] = "testuser@gmail.com"; |
| 23 const char kTestLabel[] = "testLabel"; |
| 24 // Template of a scan string to be used in GenerateTestFingerprint. The # and $ |
| 25 // are two wildcards that will be replaced by numbers to ensure unique scans. |
| 26 const char kTestScan[] = "finger#scan$"; |
| 27 |
| 28 } // namepsace |
| 29 |
| 30 class FakeBiodClientTest : public testing::Test { |
| 31 public: |
| 32 FakeBiodClientTest() |
| 33 : task_runner_(new base::TestSimpleTaskRunner), |
| 34 task_runner_handle_(task_runner_) {} |
| 35 ~FakeBiodClientTest() override {} |
| 36 |
| 37 // Returns the stored records for |user_id|. Verified to work in |
| 38 // TestGetRecordsForUser. |
| 39 std::vector<dbus::ObjectPath> GetRecordsForUser(const std::string& user_id) { |
| 40 std::vector<dbus::ObjectPath> enrollment_paths; |
| 41 fake_biod_client_.GetRecordsForUser( |
| 42 user_id, |
| 43 base::Bind(&test_utils::CopyObjectPathArray, &enrollment_paths)); |
| 44 task_runner_->RunUntilIdle(); |
| 45 return enrollment_paths; |
| 46 } |
| 47 |
| 48 // Helper function which enrolls a fingerprint. Each element in |
| 49 // |fingerprint_data| corresponds to a finger tap. |
| 50 void EnrollFingerprint(const std::string& id, |
| 51 const std::string& label, |
| 52 const std::vector<std::string>& fingerprint_data) { |
| 53 ASSERT_FALSE(fingerprint_data.empty()); |
| 54 |
| 55 dbus::ObjectPath returned_path; |
| 56 fake_biod_client_.StartEnrollSession( |
| 57 id, label, base::Bind(&test_utils::CopyObjectPath, &returned_path)); |
| 58 task_runner_->RunUntilIdle(); |
| 59 EXPECT_NE(dbus::ObjectPath(), returned_path); |
| 60 |
| 61 // Send |fingerprint_data| size - 1 incomplete scans, then finish the |
| 62 // enrollment by sending a complete scan signal. |
| 63 for (size_t i = 0; i < fingerprint_data.size(); ++i) { |
| 64 fake_biod_client_.SendEnrollScanDone( |
| 65 fingerprint_data[i], SCAN_RESULT_SUCCESS, |
| 66 i == fingerprint_data.size() - 1 /* is_complete */); |
| 67 } |
| 68 } |
| 69 |
| 70 // Helper function which enrolls |n| fingerprints with the same |id|, |label| |
| 71 // and |fingerprint_data|. |
| 72 void EnrollNTestFingerprints(const std::string& id, |
| 73 const std::string& label, |
| 74 const std::vector<std::string>& fingerprint_data, |
| 75 int n) { |
| 76 for (int i = 0; i < n; ++i) |
| 77 EnrollFingerprint(id, label, fingerprint_data); |
| 78 } |
| 79 |
| 80 // Creates a new unique fingerprint consisting of unique scans. |
| 81 std::vector<std::string> GenerateTestFingerprint(int scans) { |
| 82 EXPECT_GE(scans, 0); |
| 83 num_test_fingerprints_++; |
| 84 |
| 85 std::vector<std::string> fingerprint; |
| 86 for (int i = 0; i < scans; ++i) { |
| 87 std::string scan = kTestScan; |
| 88 base::ReplaceSubstringsAfterOffset( |
| 89 &scan, 0, "#", std::to_string(num_test_fingerprints_)); |
| 90 base::ReplaceSubstringsAfterOffset(&scan, 0, "$", std::to_string(i)); |
| 91 fingerprint.push_back(scan); |
| 92 } |
| 93 return fingerprint; |
| 94 } |
| 95 |
| 96 protected: |
| 97 FakeBiodClient fake_biod_client_; |
| 98 scoped_refptr<base::TestSimpleTaskRunner> task_runner_; |
| 99 base::ThreadTaskRunnerHandle task_runner_handle_; |
| 100 |
| 101 // This number is incremented each time GenerateTestFingerprint is called to |
| 102 // ensure each fingerprint is unique. |
| 103 int num_test_fingerprints_ = 0; |
| 104 |
| 105 private: |
| 106 DISALLOW_COPY_AND_ASSIGN(FakeBiodClientTest); |
| 107 }; |
| 108 |
| 109 TEST_F(FakeBiodClientTest, TestEnrollSessionWorkflow) { |
| 110 test_utils::TestBiodObserver observer; |
| 111 fake_biod_client_.AddObserver(&observer); |
| 112 |
| 113 const std::vector<std::string>& kTestFingerprint = GenerateTestFingerprint(2); |
| 114 // Verify that successful enrollments get stored as expected. A fingerprint |
| 115 // that was created with 2 scans should have 1 incomplete scan and 1 complete |
| 116 // scan. |
| 117 EnrollFingerprint(kTestUserId, kTestLabel, kTestFingerprint); |
| 118 EXPECT_EQ(1u, GetRecordsForUser(kTestUserId).size()); |
| 119 EXPECT_EQ(1, observer.num_incomplete_enroll_scans_received()); |
| 120 EXPECT_EQ(1, observer.num_complete_enroll_scans_received()); |
| 121 |
| 122 // Verify that the enroll session worflow can be used repeatedly by enrolling |
| 123 // 3 more fingerprints (each with 1 incomplete and 1 complete scan). |
| 124 observer.ResetAllCounts(); |
| 125 EnrollNTestFingerprints(kTestUserId, kTestLabel, kTestFingerprint, 3); |
| 126 EXPECT_EQ(4u, GetRecordsForUser(kTestUserId).size()); |
| 127 EXPECT_EQ(3, observer.num_incomplete_enroll_scans_received()); |
| 128 EXPECT_EQ(3, observer.num_complete_enroll_scans_received()); |
| 129 } |
| 130 |
| 131 // Test authentication when one user has one or more fingerprints registered. |
| 132 // This should be the normal scenario. |
| 133 TEST_F(FakeBiodClientTest, TestAuthSessionWorkflowSingleUser) { |
| 134 test_utils::TestBiodObserver observer; |
| 135 fake_biod_client_.AddObserver(&observer); |
| 136 EXPECT_EQ(0u, GetRecordsForUser(kTestUserId).size()); |
| 137 |
| 138 const std::vector<std::string>& kTestFingerprint1 = |
| 139 GenerateTestFingerprint(2); |
| 140 const std::vector<std::string>& kTestFingerprint2 = |
| 141 GenerateTestFingerprint(2); |
| 142 const std::vector<std::string>& kTestFingerprint3 = |
| 143 GenerateTestFingerprint(2); |
| 144 const std::vector<std::string>& kTestFingerprint4 = |
| 145 GenerateTestFingerprint(2); |
| 146 |
| 147 // Add two fingerprints |kTestFingerprint1| and |kTestFingerprint2| and start |
| 148 // an auth session. |
| 149 EnrollFingerprint(kTestUserId, kTestLabel, kTestFingerprint1); |
| 150 EnrollFingerprint(kTestUserId, kTestLabel, kTestFingerprint2); |
| 151 dbus::ObjectPath returned_path; |
| 152 fake_biod_client_.StartAuthSession( |
| 153 base::Bind(&test_utils::CopyObjectPath, &returned_path)); |
| 154 task_runner_->RunUntilIdle(); |
| 155 EXPECT_NE(returned_path, dbus::ObjectPath()); |
| 156 |
| 157 // Verify that by sending two attempt signals of fingerprints that have been |
| 158 // enrolled, the observer should receive two matches and zero non-matches. |
| 159 fake_biod_client_.SendAuthScanDone(kTestFingerprint1[0], SCAN_RESULT_SUCCESS); |
| 160 fake_biod_client_.SendAuthScanDone(kTestFingerprint2[0], SCAN_RESULT_SUCCESS); |
| 161 EXPECT_EQ(2, observer.num_matched_auth_scans_received()); |
| 162 EXPECT_EQ(0, observer.num_unmatched_auth_scans_received()); |
| 163 |
| 164 // Verify that by sending two attempt signals of fingerprints that have not |
| 165 // been enrolled, the observer should receive two non-matches and zero |
| 166 // matches. |
| 167 observer.ResetAllCounts(); |
| 168 fake_biod_client_.SendAuthScanDone(kTestFingerprint3[0], SCAN_RESULT_SUCCESS); |
| 169 fake_biod_client_.SendAuthScanDone(kTestFingerprint4[0], SCAN_RESULT_SUCCESS); |
| 170 EXPECT_EQ(0, observer.num_matched_auth_scans_received()); |
| 171 EXPECT_EQ(2, observer.num_unmatched_auth_scans_received()); |
| 172 } |
| 173 |
| 174 // Test authentication when multiple users have fingerprints registered. Cover |
| 175 // cases such as when both users use the same labels, a user had registered the |
| 176 // same fingerprint multiple times, or two users use the same fingerprint. |
| 177 TEST_F(FakeBiodClientTest, TestAuthenticateWorkflowMultipleUsers) { |
| 178 test_utils::TestBiodObserver observer; |
| 179 fake_biod_client_.AddObserver(&observer); |
| 180 EXPECT_EQ(0u, GetRecordsForUser(kTestUserId).size()); |
| 181 |
| 182 // Add two users, who have scanned three fingers between the two of them. |
| 183 const std::string kUserOne = std::string(kTestUserId) + "1"; |
| 184 const std::string kUserTwo = std::string(kTestUserId) + "2"; |
| 185 |
| 186 const std::string kLabelOne = std::string(kTestLabel) + "1"; |
| 187 const std::string kLabelTwo = std::string(kTestLabel) + "2"; |
| 188 const std::string kLabelThree = std::string(kTestLabel) + "3"; |
| 189 |
| 190 // Generate 2 test fingerprints per user. |
| 191 const std::vector<std::string>& kUser1Finger1 = GenerateTestFingerprint(2); |
| 192 const std::vector<std::string>& kUser1Finger2 = GenerateTestFingerprint(2); |
| 193 const std::vector<std::string>& kUser2Finger1 = GenerateTestFingerprint(2); |
| 194 const std::vector<std::string>& kUser2Finger2 = GenerateTestFingerprint(2); |
| 195 |
| 196 EnrollFingerprint(kUserOne, kLabelOne, kUser1Finger1); |
| 197 EnrollFingerprint(kUserOne, kLabelTwo, kUser1Finger2); |
| 198 // User one has registered finger two twice. |
| 199 EnrollFingerprint(kUserOne, kLabelThree, kUser1Finger2); |
| 200 EnrollFingerprint(kUserTwo, kLabelOne, kUser2Finger1); |
| 201 EnrollFingerprint(kUserTwo, kLabelTwo, kUser2Finger2); |
| 202 // User two has allowed user one to unlock their account with their first |
| 203 // finger. |
| 204 EnrollFingerprint(kUserTwo, kLabelThree, kUser1Finger1); |
| 205 |
| 206 dbus::ObjectPath returned_path; |
| 207 fake_biod_client_.StartAuthSession( |
| 208 base::Bind(&test_utils::CopyObjectPath, &returned_path)); |
| 209 task_runner_->RunUntilIdle(); |
| 210 EXPECT_NE(returned_path, dbus::ObjectPath()); |
| 211 |
| 212 // Verify that if a user registers the same finger to two different labels, |
| 213 // both labels are returned as matches. |
| 214 AuthScanMatches expected_auth_scans_matches; |
| 215 expected_auth_scans_matches[kUserOne] = {kLabelTwo, kLabelThree}; |
| 216 fake_biod_client_.SendAuthScanDone(kUser1Finger2[0], SCAN_RESULT_SUCCESS); |
| 217 EXPECT_EQ(expected_auth_scans_matches, observer.last_auth_scan_matches()); |
| 218 |
| 219 // Verify that a fingerprint associated with one user and one label returns a |
| 220 // match with one user and one label. |
| 221 expected_auth_scans_matches.clear(); |
| 222 expected_auth_scans_matches[kUserTwo] = {kLabelOne}; |
| 223 fake_biod_client_.SendAuthScanDone(kUser2Finger1[0], SCAN_RESULT_SUCCESS); |
| 224 EXPECT_EQ(expected_auth_scans_matches, observer.last_auth_scan_matches()); |
| 225 |
| 226 // Verify if two users register the same fingerprint, the matches contain |
| 227 // both users. |
| 228 expected_auth_scans_matches.clear(); |
| 229 expected_auth_scans_matches[kUserOne] = {kLabelOne}; |
| 230 expected_auth_scans_matches[kUserTwo] = {kLabelThree}; |
| 231 fake_biod_client_.SendAuthScanDone(kUser1Finger1[0], SCAN_RESULT_SUCCESS); |
| 232 EXPECT_EQ(expected_auth_scans_matches, observer.last_auth_scan_matches()); |
| 233 |
| 234 // Verify if a unregistered finger is scanned, the matches are empty. |
| 235 expected_auth_scans_matches.clear(); |
| 236 fake_biod_client_.SendAuthScanDone("Unregistered", SCAN_RESULT_SUCCESS); |
| 237 EXPECT_EQ(expected_auth_scans_matches, observer.last_auth_scan_matches()); |
| 238 } |
| 239 |
| 240 TEST_F(FakeBiodClientTest, TestGetRecordsForUser) { |
| 241 // Verify that initially |kTestUserId| will have no fingerprints. |
| 242 EXPECT_EQ(0u, GetRecordsForUser(kTestUserId).size()); |
| 243 |
| 244 // Verify that after enrolling 2 fingerprints, a GetRecords call return 2 |
| 245 // items. |
| 246 EnrollNTestFingerprints(kTestUserId, kTestLabel, GenerateTestFingerprint(2), |
| 247 2); |
| 248 EXPECT_EQ(2u, GetRecordsForUser(kTestUserId).size()); |
| 249 |
| 250 // Verify that GetRecords call for a user with no registered fingerprints |
| 251 // should return 0 items. |
| 252 EXPECT_EQ(0u, GetRecordsForUser("noRegisteredFingerprints@gmail.com").size()); |
| 253 } |
| 254 |
| 255 TEST_F(FakeBiodClientTest, TestDestroyingRecords) { |
| 256 // Verify that after enrolling 2 fingerprints and destroying them, 0 |
| 257 // fingerprints will remain. |
| 258 EnrollNTestFingerprints(kTestUserId, kTestLabel, GenerateTestFingerprint(2), |
| 259 2); |
| 260 EXPECT_EQ(2u, GetRecordsForUser(kTestUserId).size()); |
| 261 DBusMethodCallStatus returned_status; |
| 262 fake_biod_client_.DestroyAllRecords( |
| 263 base::Bind(&test_utils::CopyDBusMethodCallStatus, &returned_status)); |
| 264 EXPECT_EQ(0u, GetRecordsForUser(kTestUserId).size()); |
| 265 } |
| 266 |
| 267 TEST_F(FakeBiodClientTest, TestGetAndSetRecordLabels) { |
| 268 const std::string kLabelOne = "Finger 1"; |
| 269 const std::string kLabelTwo = "Finger 2"; |
| 270 |
| 271 EnrollFingerprint(kTestUserId, kLabelOne, GenerateTestFingerprint(2)); |
| 272 EnrollFingerprint(kTestUserId, kLabelTwo, GenerateTestFingerprint(2)); |
| 273 EXPECT_EQ(2u, GetRecordsForUser(kTestUserId).size()); |
| 274 std::vector<dbus::ObjectPath> enrollment_paths; |
| 275 fake_biod_client_.GetRecordsForUser( |
| 276 kTestUserId, |
| 277 base::Bind(&test_utils::CopyObjectPathArray, &enrollment_paths)); |
| 278 task_runner_->RunUntilIdle(); |
| 279 EXPECT_EQ(2u, enrollment_paths.size()); |
| 280 |
| 281 // Verify the labels we get using GetLabel are the same as the one we |
| 282 // originally set. |
| 283 std::string returned_str; |
| 284 fake_biod_client_.RequestRecordLabel( |
| 285 enrollment_paths[0], base::Bind(&test_utils::CopyString, &returned_str)); |
| 286 task_runner_->RunUntilIdle(); |
| 287 EXPECT_EQ(kLabelOne, returned_str); |
| 288 |
| 289 returned_str = ""; |
| 290 fake_biod_client_.RequestRecordLabel( |
| 291 enrollment_paths[1], base::Bind(&test_utils::CopyString, &returned_str)); |
| 292 task_runner_->RunUntilIdle(); |
| 293 EXPECT_EQ(kLabelTwo, returned_str); |
| 294 |
| 295 // Verify that by setting a new label, getting the label will return the value |
| 296 // of the new label. |
| 297 const std::string kNewLabelTwo = "Finger 2 New"; |
| 298 DBusMethodCallStatus returned_status; |
| 299 fake_biod_client_.SetRecordLabel( |
| 300 enrollment_paths[1], kNewLabelTwo, |
| 301 base::Bind(&test_utils::CopyDBusMethodCallStatus, &returned_status)); |
| 302 fake_biod_client_.RequestRecordLabel( |
| 303 enrollment_paths[1], base::Bind(&test_utils::CopyString, &returned_str)); |
| 304 task_runner_->RunUntilIdle(); |
| 305 EXPECT_EQ(kNewLabelTwo, returned_str); |
| 306 } |
| 307 |
| 308 } // namespace chromeos |
OLD | NEW |