mirror of
https://github.com/snowy-yang/qqbotsdk.git
synced 2026-10-21 11:04:48 +00:00
44 lines
1.4 KiB
Python
44 lines
1.4 KiB
Python
from cryptography.hazmat.primitives.asymmetric import ed25519
|
|
|
|
from qqbotsdk.crypto import build_seed, sign_msg, verify_sig
|
|
|
|
|
|
def test_build_seed_pads_to_32_bytes():
|
|
assert len(build_seed("abc")) == 32
|
|
assert len(build_seed("x" * 32)) == 32
|
|
assert len(build_seed("x" * 40)) == 32
|
|
# 同一 secret 展开结果稳定
|
|
assert build_seed("abc") == build_seed("abc")
|
|
|
|
|
|
def test_sign_and_verify_roundtrip():
|
|
secret = "test-secret"
|
|
timestamp = "1726000000"
|
|
plain_token = "plain_token"
|
|
sig = sign_msg(secret, timestamp + plain_token)
|
|
# sign_msg 产出 hex 编码的 Ed25519 签名（64 字节 = 128 hex 字符）
|
|
assert len(sig) == 128
|
|
assert verify_sig(secret, timestamp, sig, plain_token.encode())
|
|
|
|
|
|
def test_verify_sig_accepts_valid_signature():
|
|
secret = "test-secret"
|
|
timestamp = "1726000000"
|
|
body = b'{"plain_token":"abc"}'
|
|
# 签名内容 = timestamp + body
|
|
key = ed25519.Ed25519PrivateKey.from_private_bytes(build_seed(secret))
|
|
signature = key.sign(timestamp.encode() + body).hex()
|
|
assert verify_sig(secret, timestamp, signature, body)
|
|
|
|
|
|
def test_verify_sig_rejects_tampered_body():
|
|
secret = "test-secret"
|
|
timestamp = "1726000000"
|
|
body = b'{"plain_token":"abc"}'
|
|
sig = sign_msg(secret, timestamp + body.decode())
|
|
assert not verify_sig(secret, timestamp, sig, b'{"plain_token":"xyz"}')
|
|
|
|
|
|
def test_verify_sig_rejects_bad_hex():
|
|
assert not verify_sig("secret", "123", "not-hex", b"body")
|