mirror of
https://github.com/1f349/mjwt.git
synced 2024-09-19 18:16:40 +01:00
102 lines
2.9 KiB
Go
102 lines
2.9 KiB
Go
package mjwt
|
|
|
|
import (
|
|
"fmt"
|
|
"github.com/golang-jwt/jwt/v4"
|
|
"github.com/stretchr/testify/assert"
|
|
"testing"
|
|
"time"
|
|
)
|
|
|
|
type testClaims struct{ TestValue string }
|
|
|
|
func (t testClaims) Valid() error {
|
|
if t.TestValue != "hello" && t.TestValue != "world" {
|
|
return fmt.Errorf("TestValue should be hello")
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (t testClaims) Type() string { return "testClaims" }
|
|
|
|
type testClaims2 struct{ TestValue2 string }
|
|
|
|
func (t testClaims2) Valid() error {
|
|
if t.TestValue2 != "world" {
|
|
return fmt.Errorf("TestValue2 should be world")
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (t testClaims2) Type() string { return "testClaims2" }
|
|
|
|
func TestExtractClaims(t *testing.T) {
|
|
t.Parallel()
|
|
kStore := NewKeyStore()
|
|
|
|
t.Run("TestNoKID", func(t *testing.T) {
|
|
t.Parallel()
|
|
s, err := NewIssuerWithKeyStore("mjwt.test", "key1", jwt.SigningMethodRS512, kStore)
|
|
assert.NoError(t, err)
|
|
token, err := s.GenerateJwt("1", "test", nil, 10*time.Minute, testClaims{TestValue: "hello"})
|
|
assert.NoError(t, err)
|
|
|
|
a, _, err := ExtractClaims[testClaims](kStore, token)
|
|
assert.NoError(t, err)
|
|
kid, _ := a.Header["kid"].(string)
|
|
assert.Equal(t, "key1", kid)
|
|
})
|
|
|
|
t.Run("TestKID", func(t *testing.T) {
|
|
t.Parallel()
|
|
s, err := NewIssuerWithKeyStore("mjwt.test", "key2", jwt.SigningMethodRS512, kStore)
|
|
assert.NoError(t, err)
|
|
s2, err := NewIssuerWithKeyStore("mjwt.test", "key3", jwt.SigningMethodRS512, kStore)
|
|
assert.NoError(t, err)
|
|
|
|
token1, err := s.GenerateJwt("1", "test", nil, 10*time.Minute, testClaims{TestValue: "hello"})
|
|
assert.NoError(t, err)
|
|
token2, err := s2.GenerateJwt("2", "test", nil, 10*time.Minute, testClaims{TestValue: "hello"})
|
|
assert.NoError(t, err)
|
|
|
|
k1, _, err := ExtractClaims[testClaims](kStore, token1)
|
|
assert.NoError(t, err)
|
|
k2, _, err := ExtractClaims[testClaims](kStore, token2)
|
|
assert.NoError(t, err)
|
|
assert.NotEqual(t, k1.Header["kid"], k2.Header["kid"])
|
|
})
|
|
}
|
|
|
|
func TestExtractClaimsFail(t *testing.T) {
|
|
t.Parallel()
|
|
kStore := NewKeyStore()
|
|
|
|
t.Run("TestInvalidClaims", func(t *testing.T) {
|
|
t.Parallel()
|
|
s, err := NewIssuerWithKeyStore("mjwt.test", "key1", jwt.SigningMethodRS512, kStore)
|
|
assert.NoError(t, err)
|
|
token, err := s.GenerateJwt("1", "test", nil, 10*time.Minute, testClaims{TestValue: "test"})
|
|
assert.NoError(t, err)
|
|
|
|
_, _, err = ExtractClaims[testClaims2](kStore, token)
|
|
assert.Error(t, err)
|
|
assert.ErrorIs(t, err, ErrClaimTypeMismatch)
|
|
})
|
|
|
|
t.Run("TestKIDNonExist", func(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
s, err := NewIssuerWithKeyStore("mjwt.test", "key2", jwt.SigningMethodRS512, kStore)
|
|
assert.NoError(t, err)
|
|
token, err := s.GenerateJwt("1", "test", nil, 10*time.Minute, testClaims{TestValue: "test"})
|
|
assert.NoError(t, err)
|
|
|
|
kStore.RemoveKey("key2")
|
|
assert.NotContains(t, kStore.ListKeys(), "key2")
|
|
|
|
_, _, err = ExtractClaims[testClaims](kStore, token)
|
|
assert.Error(t, err)
|
|
assert.ErrorIs(t, err, ErrMissingPublicKey)
|
|
})
|
|
}
|