spec/hotp_spec.rb in rotp-1.4.6 vs spec/hotp_spec.rb in rotp-1.5.0

@@ -15,6 +15,36 @@
     subject.verify(161024, @counter).should be_true
   end
   it "should verify a string" do
     subject.verify("161024", @counter).should be_true
   end
+  it "should output its provisioning URI" do
+    url = subject.provisioning_uri('mark@percival')
+    params = CGI::parse(URI::parse(url).query)
+    url.should match(/otpauth:\/\/hotp.+/)
+    params["secret"].first.should == "a" * 32
+  end
+
+end
+
+describe "HOTP example values from the rfc" do
+  it "should match the RFC" do
+    # 12345678901234567890 in Base32
+    # GEZDGNBVGY3TQOJQGEZDGNBVGY3TQOJQ
+    hotp = ROTP::HOTP.new("GEZDGNBVGY3TQOJQGEZDGNBVGY3TQOJQ")
+    hotp.at(0).should ==(755224)
+    hotp.at(1).should ==(287082)
+    hotp.at(2).should ==(359152)
+    hotp.at(3).should ==(969429)
+    hotp.at(4).should ==(338314)
+    hotp.at(5).should ==(254676)
+    hotp.at(6).should ==(287922)
+    hotp.at(7).should ==(162583)
+    hotp.at(8).should ==(399871)
+    hotp.at(9).should ==(520489)
+  end
+  it "should verify an OTP and not allow reuse" do
+    hotp = ROTP::HOTP.new("GEZDGNBVGY3TQOJQGEZDGNBVGY3TQOJQ")
+    hotp.verify(520489, 9).should be_true
+    hotp.verify(520489, 10).should be_false
+  end
 end