mysql-haskell-1.2.3: test/Sha256Scramble.hs

module Sha256Scramble (tests) where

import qualified Data.ByteString as B
import qualified Data.ByteString.Base16 as Base16
import           Data.ByteString.Char8 (pack)
import           Database.MySQL.Connection (scrambleSHA256)
import           Test.Tasty
import           Test.Tasty.HUnit

hexToBytes :: String -> B.ByteString
hexToBytes = Base16.decodeLenient . pack

tests :: TestTree
tests = testGroup "SHA256 Scramble"
    [ testCase "empty password returns empty" $ do
        let result = scrambleSHA256 "some_salt" ""
        assertEqual "empty password" B.empty result

    , testCase "non-empty password returns 32 bytes" $ do
        let result = scrambleSHA256 "12345678901234567890" "password"
        assertEqual "scramble length" 32 (B.length result)

    , testCase "different salts produce different scrambles" $ do
        let r1 = scrambleSHA256 "salt1_______________" "password"
            r2 = scrambleSHA256 "salt2_______________" "password"
        assertBool "different salts should produce different results" (r1 /= r2)

    , testCase "different passwords produce different scrambles" $ do
        let salt = "12345678901234567890"
            r1 = scrambleSHA256 salt "password1"
            r2 = scrambleSHA256 salt "password2"
        assertBool "different passwords should produce different results" (r1 /= r2)

    , testCase "scramble is deterministic" $ do
        let salt = "12345678901234567890"
            r1 = scrambleSHA256 salt "testPassword123"
            r2 = scrambleSHA256 salt "testPassword123"
        assertEqual "same inputs produce same output" r1 r2

    , testCase "golden: salt=12345678901234567890 pass=password" $ do
        let result = scrambleSHA256 "12345678901234567890" "password"
            expected = hexToBytes "718d80fb92b693f7ee1fcad95bfe7a2be1f332ac2c3ec6cdc85893b65b240650"
        assertEqual "golden vector 1" expected result

    , testCase "golden: salt=ABCDEFGHIJKLMNOPQRST pass=secret" $ do
        let result = scrambleSHA256 "ABCDEFGHIJKLMNOPQRST" "secret"
            expected = hexToBytes "d721e183c1f036a196c1389201b8d53f38064a16f1d0923683ab886763152d75"
        assertEqual "golden vector 2" expected result
    ]