public void ReadEncryptedCookie()
{
//SETUP
var httpContext = new DefaultHttpContext();
var eProvider = new EphemeralDataProtectionProvider();
var cookie = new ImpersonationCookie(httpContext, eProvider);
var codedData = eProvider.CreateProtector(cookie.EncryptPurpose).Protect("Hello world");
//ATTEMPT
httpContext.AddRequestCookie("UserImpersonation", codedData);
var data = cookie.GetCookieInValue();
//VERIFY
data.ShouldEqual("Hello world");
}
public void TestCookieExists()
{
//SETUP
var httpContext = new DefaultHttpContext();
var eProvider = new EphemeralDataProtectionProvider();
var cookie = new ImpersonationCookie(httpContext, eProvider);
cookie.AddUpdateCookie("Hello world");
httpContext.AddRequestCookie("UserImpersonation", "???");
//ATTEMPT
//VERIFY
cookie.Exists(httpContext.Request.Cookies).ShouldBeTrue();
}
public void ReadEncryptedCookieBadDeletesCookie()
{
//SETUP
var httpContext = new DefaultHttpContext();
var eProvider = new EphemeralDataProtectionProvider();
var cookie = new ImpersonationCookie(httpContext, eProvider);
//ATTEMPT
httpContext.AddRequestCookie("UserImpersonation", "???");
var ex = Assert.Throws <CryptographicException>(() =>
cookie.GetCookieInValue());
//VERIFY
ex.Message.ShouldStartWith("An error occurred during a cryptographic operation.");
httpContext.Response.Headers["Set-Cookie"].ShouldNotBeNull();
httpContext.Response.Headers["Set-Cookie"][0].ShouldEndWith("expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; httponly");
}