DateKeys/datekey/datekey_test.go

package datekey_test

import (
	"encoding/base64"
	"errors"
	"math/rand/v2"
	"reflect"
	"testing"
	"time"

	datekeys "g.activething.com/go/DateKeys"
	"g.activething.com/go/DateKeys/datekey"
	"g.activething.com/go/DateKeys/internal/testkit"
	"g.activething.com/go/DateKeys/profile"
)

func TestNormativeRoundVector(t *testing.T) {
	// Spec §16, stated literally.
	p := profile.Quicknet()
	d, err := datekey.Resolve(p, time.Date(2030, 1, 1, 0, 0, 0, 0, time.UTC))
	if err != nil || d.Round != 66884212 {
		t.Fatalf("2030-01-01 resolved to %+v, %v", d, err)
	}
	if got := d.UnlockAt(p).Format(time.RFC3339); got != "2030-01-01T00:00:00Z" {
		t.Fatalf("round time %s", got)
	}
	rt, err := datekey.RoundTime(p, 66432123)
	if err != nil || rt.Format(time.RFC3339) != "2029-12-16T07:15:33Z" {
		t.Fatalf("round 66432123 at %s, %v", rt, err)
	}
	if got := d.Compact(); got != "dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6NjY4ODQyMTJ9" {
		t.Fatalf("dk1_ %s", got)
	}
	if got := string(d.CanonicalJSON()); got != `{"version":1,"network":"datekeys:quicknet:v1","round":66884212}` {
		t.Fatalf("canonical JSON %s", got)
	}
}

func TestGoldenRoundVectors(t *testing.T) {
	var golden testkit.RoundVectorFile
	if err := testkit.ReadJSON("../testdata/vectors/quicknet_rounds.json", &golden); err != nil {
		t.Fatal(err)
	}
	if got := testkit.RoundVectors(); !reflect.DeepEqual(got, golden) {
		t.Fatalf("round vectors changed:\n got %+v\nwant %+v", got, golden)
	}
	p := profile.Quicknet()
	for _, v := range golden.Vectors {
		at, err := time.Parse(time.RFC3339Nano, v.Requested)
		if err != nil {
			t.Fatal(err)
		}
		d, err := datekey.Resolve(p, at)
		if v.Error != "" {
			if datekeys.Code(err) != v.Error {
				t.Errorf("%s: got %v, want %s", v.Name, err, v.Error)
			}
			continue
		}
		if err != nil || d.Round != v.Round || d.UnlockAt(p).Format(time.RFC3339Nano) != v.Effective {
			t.Errorf("%s: got %+v %v", v.Name, d, err)
		}
	}
}

func TestGoldenDK1Vectors(t *testing.T) {
	var golden testkit.DK1VectorFile
	if err := testkit.ReadJSON("../testdata/vectors/dk1.json", &golden); err != nil {
		t.Fatal(err)
	}
	if got := testkit.DK1Vectors(); !reflect.DeepEqual(got, golden) {
		t.Fatalf("dk1_ vectors changed")
	}
	for _, v := range golden.Vectors {
		if v.DK1 != "" {
			d, err := datekey.Parse(v.DK1)
			if err != nil || d.ProfileID != v.Network || d.Round != v.Round {
				t.Errorf("%s: %+v %v", v.Name, d, err)
			}
			if string(d.CanonicalJSON()) != v.CanonicalJSON || base64.RawURLEncoding.EncodeToString(d.CanonicalJSON()) != v.Base64URL {
				t.Errorf("%s: intermediate encodings differ", v.Name)
			}
			continue
		}
		if v.Error == "accepted" {
			t.Errorf("%s: a rejected-encoding vector is accepted", v.Name)
		}
		if _, err := datekey.Parse(v.Input); datekeys.Code(err) != v.Error {
			t.Errorf("%s: got %v, want %s", v.Name, err, v.Error)
		}
	}
}

// Kept from the prototype: resolution never picks a round that opens early.
func TestRoundNeverOpensEarly(t *testing.T) {
	p := profile.Quicknet()
	g := time.Unix(p.GenesisTime, 0).UTC()
	for _, tc := range []struct {
		offset time.Duration
		want   uint64
	}{
		{0, 1}, {time.Nanosecond, 2}, {time.Second, 2}, {3 * time.Second, 2}, {3*time.Second + time.Nanosecond, 3}, {2997 * time.Second, 1000},
	} {
		requested := g.Add(tc.offset)
		d, err := datekey.Resolve(p, requested)
		if err != nil || d.Round != tc.want {
			t.Fatalf("offset %s: %+v, %v", tc.offset, d, err)
		}
		if u := d.UnlockAt(p); u.Before(requested) || u.Sub(requested) >= p.Period {
			t.Fatal("unsafe rounding")
		}
	}
}

func TestResolveProperty(t *testing.T) {
	p := profile.Quicknet()
	r := rand.New(rand.NewPCG(3, 4))
	for range 20000 {
		secs := p.GenesisTime + r.Int64N(profile.MaxUnixTime-p.GenesisTime-3)
		at := time.Unix(secs, r.Int64N(int64(time.Second)))
		d, err := datekey.Resolve(p, at)
		if err != nil {
			t.Fatalf("%s: %v", at, err)
		}
		u := d.UnlockAt(p)
		// The first round whose time is >= at: never earlier, and the previous
		// round is strictly earlier.
		if u.Before(at) {
			t.Fatalf("%s resolves to round %d at %s, before the request", at, d.Round, u)
		}
		if d.Round > 1 {
			prev, _ := datekey.RoundTime(p, d.Round-1)
			if !prev.Before(at) {
				t.Fatalf("%s: round %d at %s would already satisfy the request", at, d.Round-1, prev)
			}
		}
		parsed, err := datekey.Parse(d.Compact())
		if err != nil || parsed != d {
			t.Fatalf("Parse(Compact(d)) != d for %+v: %v", d, err)
		}
	}
}

func TestTimezoneIndependence(t *testing.T) {
	p := profile.Quicknet()
	a, _ := time.Parse(time.RFC3339Nano, "2026-10-22T19:00:00.001+02:00")
	b, _ := time.Parse(time.RFC3339Nano, "2026-10-22T17:00:00.001Z")
	da, _ := datekey.Resolve(p, a)
	db, _ := datekey.Resolve(p, b)
	if da != db {
		t.Fatal("timezone changed the DateKey")
	}
}

func TestValidate(t *testing.T) {
	p := profile.Quicknet()
	if err := (datekey.DateKey{ProfileID: "datekeys:evmnet:v1", Round: 5}).Validate(p); !errors.Is(err, datekeys.ErrProfileMismatch) {
		t.Fatalf("other profile: %v", err)
	}
	for _, r := range []uint64{0, p.MaxRound() + 1} {
		if err := (datekey.DateKey{ProfileID: p.ID, Round: r}).Validate(p); !errors.Is(err, datekeys.ErrDateKeyInvalid) {
			t.Fatalf("round %d: %v", r, err)
		}
	}
	if !(datekey.DateKey{ProfileID: p.ID, Round: 0}).UnlockAt(p).IsZero() {
		t.Fatal("invalid DateKey has an unlock time")
	}
	if (datekey.DateKey{ProfileID: `bad"id`, Round: 1}).Compact() != "" {
		t.Fatal("invalid DateKey has a dk1_ form")
	}
	if _, err := datekey.Resolve(p, time.Time{}); !errors.Is(err, datekeys.ErrDateKeyInvalid) {
		t.Fatalf("zero time: %v", err)
	}
}

func TestNumberSpellings(t *testing.T) {
	enc := func(round string) string {
		return datekey.Prefix + base64.RawURLEncoding.EncodeToString([]byte(`{"version":1,"network":"datekeys:quicknet:v1","round":`+round+`}`))
	}
	for _, s := range []string{"1000.0", "1e3", "1E3", "10e2", "1000e0", "100000e-2", "0.1e4"} {
		if _, err := datekey.Parse(enc(s)); !errors.Is(err, datekeys.ErrDateKeyNonCanonical) {
			t.Errorf("%s: %v, want non-canonical", s, err)
		}
	}
	for _, s := range []string{"1.5", "-1000", "1e-3", "1e400", "18446744073709551616", "0", "-0", "0e5"} {
		if _, err := datekey.Parse(enc(s)); !errors.Is(err, datekeys.ErrDateKeyInvalid) {
			t.Errorf("%s: %v, want invalid", s, err)
		}
	}
}

// Spec §19, the reading rules of steps 1 to 3: step 1 accepts only the two
// Base64 alphabets, so CR and LF, which the Go decoders would skip, fail
// there; step 2 accepts one RFC 8259 JSON text holding an object, with JSON
// white space around it but no byte order mark; step 3 reads the exact
// decimal value of each number, never its IEEE 754 double.
func TestReadingRules(t *testing.T) {
	canon := datekey.DateKey{ProfileID: profile.QuicknetID, Round: 66884212}.Compact()
	payload := canon[len(datekey.Prefix):]
	enc := func(json string) string {
		return datekey.Prefix + base64.RawURLEncoding.EncodeToString([]byte(json))
	}
	for _, tc := range []struct {
		name, in string
		want     error
	}{
		{"LF inside the Base64", datekey.Prefix + payload[:8] + "\n" + payload[8:], datekeys.ErrDateKeyInvalid},
		{"CR inside the Base64", datekey.Prefix + payload[:8] + "\r" + payload[8:], datekeys.ErrDateKeyInvalid},
		{"CR LF after the Base64", canon + "\r\n", datekeys.ErrDateKeyInvalid},
		{"LF before the Base64", datekey.Prefix + "\n" + payload, datekeys.ErrDateKeyInvalid},
		{"space inside the Base64", datekey.Prefix + payload[:8] + " " + payload[8:], datekeys.ErrDateKeyInvalid},
		{"both alphabets mixed", datekey.Prefix + "-+" + payload[2:], datekeys.ErrDateKeyInvalid},
		{"byte order mark", enc("\ufeff" + `{"version":1,"network":"datekeys:quicknet:v1","round":66884212}`), datekeys.ErrDateKeyInvalid},
		{"JSON white space before the object", enc(" \t\r\n" + `{"version":1,"network":"datekeys:quicknet:v1","round":66884212}`), datekeys.ErrDateKeyNonCanonical},
		{"invalid UTF-8 in a member a repeated name overwrites", enc(`{"version":1,"network":"` + "\xff" + `","network":"datekeys:quicknet:v1","round":66884212}`), datekeys.ErrDateKeyInvalid},
		{"invalid UTF-8 in a member name", enc(`{"version":1,"netw` + "\xff" + `ork":"x","network":"datekeys:quicknet:v1","round":66884212}`), datekeys.ErrDateKeyInvalid},
		{"a JSON array", enc(`[{"version":1,"network":"datekeys:quicknet:v1","round":66884212}]`), datekeys.ErrDateKeyInvalid},
		{"version 1.0000000000000001, 1 as a double", enc(`{"version":1.0000000000000001,"network":"datekeys:quicknet:v1","round":66884212}`), datekeys.ErrDateKeyInvalid},
		{"round 66884212.00000000000001", enc(`{"version":1,"network":"datekeys:quicknet:v1","round":66884212.00000000000001}`), datekeys.ErrDateKeyInvalid},
		{"round 2^53+1, 2^53 as a double", enc(`{"version":1,"network":"datekeys:quicknet:v1","round":9007199254740993}`), datekeys.ErrDateKeyInvalid},
		{"version 1.0", enc(`{"version":1.0,"network":"datekeys:quicknet:v1","round":66884212}`), datekeys.ErrDateKeyNonCanonical},
		{"version 100e-2", enc(`{"version":100e-2,"network":"datekeys:quicknet:v1","round":66884212}`), datekeys.ErrDateKeyNonCanonical},
	} {
		if _, err := datekey.Parse(tc.in); !errors.Is(err, tc.want) {
			t.Errorf("%s: %v, want %s", tc.name, err, datekeys.Code(tc.want))
		}
	}
}

func FuzzParse(f *testing.F) {
	d := datekey.DateKey{ProfileID: profile.QuicknetID, Round: 1000}
	f.Add(d.Compact())
	f.Add("dk1_invalid")
	f.Add(datekey.Prefix + base64.RawURLEncoding.EncodeToString([]byte(`{"version":1,"network":"a","round":1e3}`)))
	f.Fuzz(func(t *testing.T, s string) {
		d, err := datekey.Parse(s)
		if err != nil {
			if c := datekeys.Code(err); c != "ERR_DATEKEY_INVALID" && c != "ERR_DATEKEY_NON_CANONICAL" {
				t.Fatalf("unexpected error %v", err)
			}
			return
		}
		if d.Compact() != s {
			t.Fatal("accepted a non-canonical DateKey")
		}
	})
}