implement the TLS Cookie extension

internal/handshake/cookie_handler_test.go

@@ -0,0 +1,49 @@
+package handshake
+
+import (
+	"net"
+
+	"github.com/bifurcation/mint"
+
+	. "github.com/onsi/ginkgo"
+	. "github.com/onsi/gomega"
+)
+
+var callbackReturn bool
+var mockCallback = func(net.Addr, *Cookie) bool {
+	return callbackReturn
+}
+
+var _ = Describe("Cookie Handler", func() {
+	var ch *cookieHandler
+	var conn *mint.Conn
+
+	BeforeEach(func() {
+		callbackReturn = false
+		var err error
+		ch, err = newCookieHandler(mockCallback)
+		Expect(err).ToNot(HaveOccurred())
+		addr := &net.UDPAddr{IP: net.IPv4(42, 43, 44, 45), Port: 46}
+		conn = mint.NewConn(&fakeConn{remoteAddr: addr}, &mint.Config{}, false)
+	})
+
+	It("generates and validates a token", func() {
+		cookie, err := ch.Generate(conn)
+		Expect(err).ToNot(HaveOccurred())
+		Expect(ch.Validate(conn, cookie)).To(BeFalse())
+		callbackReturn = true
+		Expect(ch.Validate(conn, cookie)).To(BeTrue())
+	})
+
+	It("doesn't generate a token if the callback says so", func() {
+		callbackReturn = true
+		cookie, err := ch.Generate(conn)
+		Expect(err).ToNot(HaveOccurred())
+		Expect(cookie).To(BeNil())
+	})
+
+	It("correctly handles a token that it can't decode", func() {
+		cookie := []byte("unparseable cookie")
+		Expect(ch.Validate(conn, cookie)).To(BeFalse())
+	})
+})