fcoin/test/bip70-test.js

'use strict';

var bn = require('bn.js');
var bcoin = require('../').set('main');
var utils = bcoin.utils;
var crypto = require('../lib/crypto/crypto');
var constants = bcoin.constants;
var network = bcoin.networks;
var assert = require('assert');
var tests = require('./data/bip70.json');
var bip70 = require('../lib/bip70/bip70');
var x509 = require('../lib/bip70/x509');

tests.valid = new Buffer(tests.valid, 'hex');
tests.invalid = new Buffer(tests.invalid, 'hex');
tests.untrusted = new Buffer(tests.untrusted, 'hex');
tests.ack = new Buffer(tests.ack, 'hex');
tests.ca = {
  crt: new Buffer(tests.ca.crt, 'hex'),
  priv: new Buffer(tests.ca.priv, 'hex'),
  pub: new Buffer(tests.ca.pub, 'hex')
};

x509.allowUntrusted = true;
x509.trusted = {};

describe('BIP70', function() {
  function testRequest(data) {
    var request = bip70.PaymentRequest.fromRaw(data);
    assert.equal(request.pkiType, 'x509+sha256');
    assert(request.pkiData);
    assert(request.getChain());
    assert(request.paymentDetails);
    assert(request.paymentDetails.memo.length !== 0);
    assert(request.paymentDetails.paymentUrl.length !== 0);
    var ser = request.toRaw();
    assert.equal(ser.toString('hex'), data.toString('hex'));
    assert(request.verify());
  }

  x509.verifyTime = function() { return true; };

  it('should parse and verify a payment request', function() {
    testRequest(tests.valid);
    testRequest(tests.invalid);
    testRequest(tests.untrusted);
  });

  it('should verify cert chain', function() {
    var request = bip70.PaymentRequest.fromRaw(tests.valid);

    assert.equal(request.version, 1);
    assert.equal(request.getChain().length, 4);
    assert.equal(request.paymentDetails.paymentUrl,
      'https://test.bitpay.com/i/CMWpuFsjgmQ2ZLiyGfcF1W');
    assert.equal(request.paymentDetails.network, 'test');
    assert.equal(request.paymentDetails.time, 1408645830);
    assert.equal(request.paymentDetails.expires, 1408646730);
    assert.equal(request.paymentDetails.outputs.length, 1);
    assert(!request.paymentDetails.merchantData);
    assert(request.paymentDetails.isExpired());

    assert(request.verifyChain());

    var request = bip70.PaymentRequest.fromRaw(tests.invalid);

    assert.equal(request.version, 1);
    assert.equal(request.getChain().length, 3);
    assert.equal(request.paymentDetails.paymentUrl,
      'https://bitpay.com/i/PAQtNxX7KL8BtJBnfXyTaH');
    assert.equal(request.paymentDetails.network, 'main');
    assert.equal(request.paymentDetails.time, 1442409238);
    assert.equal(request.paymentDetails.expires, 1442410138);
    assert.equal(request.paymentDetails.outputs.length, 1);
    assert.equal(request.paymentDetails.merchantData.length, 76);
    assert(request.paymentDetails.getData('json'));
    assert(request.paymentDetails.isExpired());

    assert(request.verifyChain());

    request.paymentDetails.setData({foo:1}, 'json');
    assert.equal(request.paymentDetails.merchantData.length, 9);
    assert.deepStrictEqual(request.paymentDetails.getData('json'), {foo:1});
    assert(!request.verify());

    var request = bip70.PaymentRequest.fromRaw(tests.untrusted);

    assert.equal(request.version, -1);
    assert.equal(request.getChain().length, 2);
    assert.equal(request.paymentDetails.paymentUrl,
      'https://www.coinbase.com/rp/55f9ca703d5d80008c0001f4');
    assert.equal(request.paymentDetails.network, null);
    assert.equal(request.paymentDetails.time, 1442433682);
    assert.equal(request.paymentDetails.expires, 1442434548);
    assert.equal(request.paymentDetails.outputs.length, 1);
    assert.equal(request.paymentDetails.merchantData.length, 32);
    assert.equal(request.paymentDetails.getData('utf8'),
      'bb79b6f2310e321bd3b1d929edbeb358');
    assert(request.paymentDetails.isExpired());

    assert(request.verifyChain());
  });

  it('should fail to verify cert signatures when enforcing trust', function() {
    x509.allowUntrusted = false;
    var request = bip70.PaymentRequest.fromRaw(tests.valid);
    assert(!request.verifyChain());
    var request = bip70.PaymentRequest.fromRaw(tests.invalid);
    assert(!request.verifyChain());
    var request = bip70.PaymentRequest.fromRaw(tests.untrusted);
    assert(!request.verifyChain());
  });

  it('should verify cert signatures once root cert is added', function() {
    var request = bip70.PaymentRequest.fromRaw(tests.valid);
    x509.setTrust([request.getChain().pop()]);
    assert(request.verifyChain());
    var request = bip70.PaymentRequest.fromRaw(tests.untrusted);
    assert(!request.verifyChain());
  });

  it('should still fail to verify cert signatures for invalid', function() {
    var request = bip70.PaymentRequest.fromRaw(tests.invalid);
    assert(!request.verifyChain());
  });

  it('should get chain and ca for request', function() {
    var request = bip70.PaymentRequest.fromRaw(tests.valid);
    assert.equal(request.getChain().length, 4);
    assert.equal(request.getCA().name,
      'Go Daddy Class 2 Certification Authority');
  });

  it('should validate untrusted once again', function() {
    var request = bip70.PaymentRequest.fromRaw(tests.untrusted);
    x509.setTrust([request.getChain().pop()]);
    var request = bip70.PaymentRequest.fromRaw(tests.untrusted);
    assert(request.verifyChain());
    assert.equal(request.getCA().name,
      'DigiCert SHA2 Extended Validation Server CA');
  });

  it('should parse a payment ack', function() {
    var ack = bip70.PaymentACK.fromRaw(tests.ack);
    assert.equal(ack.memo.length, 95);
    assert.equal(ack.memo, 'Transaction received by BitPay.'
      + ' Invoice will be marked as paid if the transaction is confirmed.');
    assert.equal(ack.toRaw().toString('hex'), tests.ack.toString('hex'));
  });

  it('should create a payment request, sign, and verify', function() {
    var request = new bip70.PaymentRequest({
      version: 25,
      paymentDetails: {
        network: 'testnet',
        paymentUrl: 'http://bcoin.io/payme',
        memo: 'foobar',
        time: utils.now(),
        expires: utils.now() + 3600,
        outputs: [
          { value: 10000, address: bcoin.address() },
          { value: 50000, address: bcoin.address() }
        ],
        merchantData: { foo: 'bar' }
      }
    });

    assert.equal(request.pkiType, null);
    assert(!request.pkiData);
    assert.equal(request.getChain().length, 0);
    assert(request.paymentDetails);
    assert(request.paymentDetails.memo.length !== 0);
    assert(request.paymentDetails.paymentUrl.length !== 0);
    assert.deepStrictEqual(request.paymentDetails.getData('json'), {foo:'bar'});

    assert.equal(request.version, 25);
    assert.equal(request.paymentDetails.paymentUrl, 'http://bcoin.io/payme');
    assert.equal(request.paymentDetails.network, 'testnet');
    assert(request.paymentDetails.time <= utils.now());
    assert.equal(request.paymentDetails.expires,
      request.paymentDetails.time + 3600);
    assert.equal(request.paymentDetails.outputs.length, 2);
    assert(request.paymentDetails.merchantData);
    assert(!request.paymentDetails.isExpired());

    assert(!request.pkiData);
    request.sign(tests.ca.priv, tests.ca.crt);

    assert(request.pkiData);
    assert.equal(request.pkiType, 'x509+sha256');
    assert.equal(request.getChain().length, 1);

    assert(request.verify());
    assert(!request.verifyChain());

    testRequest(request.toRaw());

    x509.setTrust(tests.ca.crt);
    assert(request.verifyChain());
    assert.equal(request.getCA().name, 'JJs CA');

    request.version = 24;
    assert(!request.verify());
  });
});