activedirectory2/test/authenticatePromised.js

'use strict'
/* eslint-env node, mocha */
/* eslint-disable no-unused-expressions */

const expect = require('chai').expect
const ActiveDirectory = require('../index').promiseWrapper
const config = require('./config')

let server = require('./mockServer')

describe('Promised Authentication', function () {
  let ad
  const settings = require('./settings').authenticate
  const LDAP_INVALID_CREDENTIALS = 49

  before(function (done) {
    server(function (s) {
      ad = new ActiveDirectory(config)
      server = s
      done()
    })
  })

  describe('#authenticate()', function () {
    it('should return true if the username (distinguishedName) and password are correct', function (done) {
      ad.authenticate(settings.username.dn, settings.password)
        .then((auth) => {
          expect(auth).to.be.true
          done()
        })
        .catch(done)
    })

    it('should return true if the username (userPrincipalName) and password are correct', function (done) {
      ad.authenticate(settings.username.userPrincipalName, settings.password)
        .then((auth) => {
          expect(auth).to.be.true
          done()
        })
        .catch(done)
    })

    it('should return true if the username (DOMAIN\\username) and password are correct', function (done) {
      ad.authenticate(settings.username.domainUsername, settings.password)
        .then((auth) => {
          expect(auth).to.be.true
          done()
        })
        .catch(done)
    })

    it('should return empty or null err if the username and password are correct', function (done) {
      ad.authenticate(settings.username.domainUsername, settings.password)
        .then((auth) => {
          expect(auth).to.be.true
          done()
        })
        .catch(done)
    })

    it('should return false if username is null', function (done) {
      ad.authenticate(null, settings.password)
        .then((auth) => {
          expect(auth).to.be.false
          done()
        })
        .catch((err) => {
          expect(err).to.be.an('object')
          expect(err.code).to.exist
          expect(err.code).to.equal(LDAP_INVALID_CREDENTIALS)
          done()
        })
    })

    it('should return false if username is an empty string.', function (done) {
      ad.authenticate('', settings.password)
        .then((auth) => {
          expect(auth).to.be.false
          done()
        })
        .catch((err) => {
          expect(err).to.be.an('object')
          expect(err.code).to.exist
          expect(err.code).to.equal(LDAP_INVALID_CREDENTIALS)
          done()
        })
    })

    it('should return err with LDAP_INVALID_CREDENTIALS if username and password are incorrect', function (done) {
      ad.authenticate('CN=invalid,DC=domain,DC=com', '!!!INVALID PASSWORD!!!')
        .then((auth) => {
          expect(auth).to.be.false
          done()
        })
        .catch((err) => {
          expect(err).to.be.an('object')
          expect(err.code).to.exist
          expect(err.code).to.equal(LDAP_INVALID_CREDENTIALS)
          done()
        })
    })
  })
})