mirror of
https://github.com/gravitational/teleport.git
synced 2026-11-02 14:59:53 +08:00
Alan Parra
70a0ad132e
Introduce the prompt.Password function and use it consistently whenever we read a password, OTP or PIN. The PR makes it easy to support PINs during MFA authentication, so now we do so. It also adds the capability to mock prompt.Stdin() for tests, adding a uniform way to fake user input in tests without having to swap functions. Complements #10953 and #9160. * Prompt for OTPs as passwords (take 1), read PINs on MFA authentication * Add the prompt.Password method * Add Stdin mocking capabilities to the prompt package * Delegate password reads to prompt.Stdin().ReadPassword() * Remove stdinHijack from PromptMFAChallenge * Change api_login_test.go to FakeReader * Change tsh_test.go to FakeReader * Retire client.ReadPassword in favor of prompt.Password
75 lines
1.8 KiB
Go
75 lines
1.8 KiB
Go
// Copyright 2022 Gravitational, Inc
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package prompt
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"sync"
|
|
)
|
|
|
|
type FakeReplyFunc func(context.Context) (string, error)
|
|
|
|
type FakeReader struct {
|
|
mu sync.Mutex
|
|
replies []FakeReplyFunc
|
|
}
|
|
|
|
// NewFakeReader returns a fake that can be used in place of a ContextReader.
|
|
// Call Add functions in the desired order to configure responses. Each call
|
|
// represents a read reply, in order.
|
|
func NewFakeReader() *FakeReader {
|
|
return &FakeReader{}
|
|
}
|
|
|
|
func (r *FakeReader) AddReply(fn FakeReplyFunc) *FakeReader {
|
|
r.mu.Lock()
|
|
defer r.mu.Unlock()
|
|
r.replies = append(r.replies, fn)
|
|
return r
|
|
}
|
|
|
|
func (r *FakeReader) AddString(s string) *FakeReader {
|
|
return r.AddReply(func(context.Context) (string, error) {
|
|
return s, nil
|
|
})
|
|
}
|
|
|
|
func (r *FakeReader) AddError(err error) *FakeReader {
|
|
return r.AddReply(func(context.Context) (string, error) {
|
|
return "", err
|
|
})
|
|
}
|
|
|
|
func (r *FakeReader) ReadContext(ctx context.Context) ([]byte, error) {
|
|
r.mu.Lock()
|
|
if len(r.replies) == 0 {
|
|
r.mu.Unlock()
|
|
return nil, errors.New("no fake replies available")
|
|
}
|
|
|
|
// Pop first reply.
|
|
fn := r.replies[0]
|
|
r.replies = r.replies[1:]
|
|
r.mu.Unlock()
|
|
|
|
val, err := fn(ctx)
|
|
return []byte(val), err
|
|
}
|
|
|
|
func (r *FakeReader) ReadPassword(ctx context.Context) ([]byte, error) {
|
|
return r.ReadContext(ctx)
|
|
}
|