paper-handlebars/spec/helpers/nonce.js at afd9c8918f9db0ddb17273b703ca4b893e7dd714 · bigcommerce/paper-handlebars · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
const Lab = require('lab');
const lab = exports.lab = Lab.script();
const { describe, it}  = lab;
const {testRunner, buildRenderer, randomString} = require('../spec-helpers');

describe('nonce helper', function () {
    const context = {}

    it('should render a nonce in quotes with the correct value from request params', function (done) {
        const requestParams = {
            security: {
                nonce: randomString()
            },
        }
        const renderer = buildRenderer({}, {}, {}, null, requestParams);
        const runTestCases = testRunner({context, renderer});
        runTestCases([
            {
                input: '{{nonce}}',
                output: requestParams.security.nonce,
            },
        ], done);
    });

    it('should not render a nonce since request param is empty', function (done) {
        const requestParams = {
            security: {},
        }
        const renderer = buildRenderer({}, {}, {}, null, requestParams);
        const runTestCases = testRunner({context, renderer});
        runTestCases([
            {
                input: '{{nonce}}',
                output: '',
            },
        ], done);
    });

    it('should not render a nonce when no security in params', function (done) {
        const requestParams = {}
        const renderer = buildRenderer({}, {}, {}, null, requestParams);
        const runTestCases = testRunner({context, renderer});
        runTestCases([
            {
                input: '{{nonce}}',
                output: '',
            },
        ], done);
    });

    it('should not render a nonce when params is null', function (done) {
        const renderer = buildRenderer({}, {}, {}, null, null);
        const runTestCases = testRunner({context, renderer});
        runTestCases([
            {
                input: '{{nonce}}',
                output: '',
            },
        ], done);
    });

    it('should not render a nonce when security.nonce is falsy', function (done) {
        const requestParams = {
            security: {
                nonce: ''
            },
        }
        const renderer = buildRenderer({}, {}, {}, null, requestParams);
        const runTestCases = testRunner({context, renderer});
        runTestCases([
            {
                input: '{{nonce}}',
                output: '',
            },
        ], done);
    });
});