msteinert-go-pam/module-transaction-mock.go

//go:build !go_pam_module

package pam

/*
#cgo CFLAGS: -Wall -std=c99
#include <stdint.h>
#include <stdlib.h>
#include <security/pam_modules.h>

void init_pam_conv(struct pam_conv *conv, uintptr_t appdata);
*/
import "C"

import (
	"errors"
	"fmt"
	"runtime"
	"runtime/cgo"
	"testing"
	"unsafe"
)

type mockModuleTransactionExpectations struct {
	UserPrompt string
	DataKey    string
}

type mockModuleTransactionReturnedData struct {
	User            string
	InteractiveUser bool
	Status          Error
}

type mockModuleTransaction struct {
	moduleTransaction
	T                   *testing.T
	Expectations        mockModuleTransactionExpectations
	RetData             mockModuleTransactionReturnedData
	ConversationHandler ConversationHandler
	moduleData          map[string]uintptr
	allocatedData       []unsafe.Pointer
}

func newMockModuleTransaction(m *mockModuleTransaction) *mockModuleTransaction {
	m.moduleData = make(map[string]uintptr)
	runtime.SetFinalizer(m, func(m *mockModuleTransaction) {
		for _, ptr := range m.allocatedData {
			C.free(ptr)
		}
		for _, handle := range m.moduleData {
			_go_pam_data_cleanup(nil, C.uintptr_t(handle), C.PAM_DATA_SILENT)
		}
	})
	return m
}

func (m *mockModuleTransaction) getUser(outUser **C.char, prompt *C.char) C.int {
	goPrompt := C.GoString(prompt)
	if goPrompt != m.Expectations.UserPrompt {
		m.T.Fatalf("unexpected prompt: %s vs %s", goPrompt, m.Expectations.UserPrompt)
		return C.int(ErrAbort)
	}

	user := m.RetData.User
	if m.RetData.InteractiveUser || (m.RetData.User == "" && m.ConversationHandler != nil) {
		if m.ConversationHandler == nil {
			m.T.Fatalf("no conversation handler provided")
		}
		u, err := m.ConversationHandler.RespondPAM(PromptEchoOn, goPrompt)
		user = u

		if err != nil {
			var pamErr Error
			if errors.As(err, &pamErr) {
				return C.int(pamErr)
			}
			return C.int(ErrAbort)
		}
	}

	cUser := C.CString(user)
	m.allocatedData = append(m.allocatedData, unsafe.Pointer(cUser))

	*outUser = cUser
	return C.int(m.RetData.Status)
}

func (m *mockModuleTransaction) getData(key *C.char, outHandle *C.uintptr_t) C.int {
	goKey := C.GoString(key)
	if m.Expectations.DataKey != "" && goKey != m.Expectations.DataKey {
		m.T.Fatalf("data key mismatch: %#v vs %#v", goKey, m.Expectations.DataKey)
	}
	if handle, ok := m.moduleData[goKey]; ok {
		*outHandle = C.uintptr_t(handle)
	} else {
		*outHandle = 0
	}
	return C.int(m.RetData.Status)
}

func (m *mockModuleTransaction) setData(key *C.char, handle C.uintptr_t) C.int {
	goKey := C.GoString(key)
	if m.Expectations.DataKey != "" && goKey != m.Expectations.DataKey {
		m.T.Fatalf("data key mismatch: %#v vs %#v", goKey, m.Expectations.DataKey)
	}
	if oldHandle, ok := m.moduleData[goKey]; ok {
		_go_pam_data_cleanup(nil, C.uintptr_t(oldHandle), C.PAM_DATA_REPLACE)
	}
	if handle != 0 {
		m.moduleData[goKey] = uintptr(handle)
	}
	return C.int(m.RetData.Status)
}

func (m *mockModuleTransaction) getConv() (*C.struct_pam_conv, error) {
	if m.ConversationHandler != nil {
		conv := C.struct_pam_conv{}
		handler := cgo.NewHandle(m.ConversationHandler)
		C.init_pam_conv(&conv, C.uintptr_t(handler))
		return &conv, nil
	}
	if C.int(m.RetData.Status) != success {
		return nil, m.RetData.Status
	}
	return nil, nil
}

type mockConversationHandler struct {
	User                    string
	PromptEchoOn            string
	PromptEchoOff           string
	TextInfo                string
	ErrorMsg                string
	ExpectedMessage         string
	ExpectedMessagesByStyle map[Style]string
	CheckEmptyMessage       bool
	ExpectedStyle           Style
	CheckZeroStyle          bool
	IgnoreUnknownStyle      bool
}

func (c mockConversationHandler) RespondPAM(s Style, msg string) (string, error) {
	var expectedMsg = c.ExpectedMessage
	if msg, ok := c.ExpectedMessagesByStyle[s]; ok {
		expectedMsg = msg
	}

	if (expectedMsg != "" || c.CheckEmptyMessage) &&
		msg != expectedMsg {
		return "", fmt.Errorf("%w: unexpected prompt: %s vs %s",
			ErrConv, msg, c.ExpectedMessage)
	}

	if (c.ExpectedStyle != 0 || c.CheckZeroStyle) &&
		s != c.ExpectedStyle {
		return "", fmt.Errorf("%w: unexpected style: %#v vs %#v",
			ErrConv, s, c.ExpectedStyle)
	}

	switch s {
	case PromptEchoOn:
		if c.User != "" {
			return c.User, nil
		}
		return c.PromptEchoOn, nil
	case PromptEchoOff:
		return c.PromptEchoOff, nil
	case TextInfo:
		return c.TextInfo, nil
	case ErrorMsg:
		return c.ErrorMsg, nil
	}

	if c.IgnoreUnknownStyle {
		return c.ExpectedMessage, nil
	}

	return "", fmt.Errorf("%w: unhandled style: %v", ErrConv, s)
}