Mirrors/chatmail-core
1
0
Fork 0
mirror of https://github.com/chatmail/core.git synced 2026-07-14 15:03:09 +03:00
Code Issues Packages Projects Releases Wiki Activity

test: securejoin: Check that "vc-{,request-}pubkey" messages don't contain displayname

Browse Source 
These messages are AUTH-encrypted and shalln't contain profile data as per the SecureJoin v3 spec,
otherwise the profile data can be seen e.g. by other broadcast subscribers.
This commit is contained in:
iequidoo
2026-07-03 14:50:48 -03:00
committed by iequidoo
parent e5d56a3b70
commit d9ab7a7a43
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/securejoin/securejoin_tests.rs
View File

@@ -125,6 +125,8 @@ async fn test_setup_contact_ex(case: SetupContactCase) {
"vc-request-pubkey"
);
assert!(msg.get_header(HeaderDef::SecureJoinAuth).is_some());
let encrypted_payload = String::from_utf8(msg.decoded_data.clone()).unwrap();
assert!(!encrypted_payload.contains("Bob Examplenet"));
assert!(!msg.header_exists(HeaderDef::AutoSubmitted));
tcm.section("Step 3: Alice receives vc-request-pubkey, sends vc-pubkey");
@@ -143,6 +145,8 @@ async fn test_setup_contact_ex(case: SetupContactCase) {
let msg = bob.parse_msg(&sent).await;
assert!(msg.was_encrypted());
assert_eq!(msg.get_header(HeaderDef::SecureJoin).unwrap(), "vc-pubkey");
let encrypted_payload = String::from_utf8(msg.decoded_data.clone()).unwrap();
assert!(!encrypted_payload.contains("Alice Exampleorg"));
assert_eq!(
msg.get_header(HeaderDef::AutoSubmitted),
alice_auto_submitted_hdr.then_some("auto-generated")