mirror of
https://github.com/hanzoai/jose.git
synced 2026-09-24 17:00:01 +00:00
Filip Skokan
4d970fe995
Route compact, flattened, general, and JWT operations through shared JWS and JWE cores so each token is validated, parsed, and encoded once. Consolidate critical-header and algorithm-option validation. Signed-off-by: Filip Skokan <[email protected]>
70 lines
2.1 KiB
TypeScript
70 lines
2.1 KiB
TypeScript
import test from 'ava'
|
|
import timekeeper from 'timekeeper'
|
|
import { setters } from './time_setters.js'
|
|
|
|
import { UnsecuredJWT, decodeJwt } from '../../src/index.js'
|
|
|
|
const now = 1604416038
|
|
|
|
test.before(async (t) => {
|
|
t.context.payload = { 'urn:example:claim': true }
|
|
|
|
timekeeper.freeze(now * 1000)
|
|
})
|
|
|
|
test.after(timekeeper.reset)
|
|
|
|
test('UnsecuredJWT', async (t) => {
|
|
const jwt = new UnsecuredJWT(t.context.payload).encode()
|
|
t.is(jwt, 'eyJhbGciOiJub25lIn0.eyJ1cm46ZXhhbXBsZTpjbGFpbSI6dHJ1ZX0.')
|
|
})
|
|
|
|
test('UnsecuredJWT validations', (t) => {
|
|
t.throws(() => UnsecuredJWT.decode(null), {
|
|
code: 'ERR_JWT_INVALID',
|
|
message: 'Unsecured JWT must be a string',
|
|
})
|
|
t.throws(() => UnsecuredJWT.decode('....'), {
|
|
code: 'ERR_JWT_INVALID',
|
|
message: 'Invalid Unsecured JWT',
|
|
})
|
|
t.throws(() => UnsecuredJWT.decode('..'), {
|
|
code: 'ERR_JWT_INVALID',
|
|
message: 'Invalid Unsecured JWT',
|
|
})
|
|
t.throws(() => UnsecuredJWT.decode('..foo'), {
|
|
code: 'ERR_JWT_INVALID',
|
|
message: 'Invalid Unsecured JWT',
|
|
})
|
|
t.throws(() => UnsecuredJWT.decode('eyJhbGciOiJIUzI1NiJ9.eyJ1cm46ZXhhbXBsZTpjbGFpbSI6dHJ1ZX0.'), {
|
|
code: 'ERR_JWT_INVALID',
|
|
message: 'Invalid Unsecured JWT',
|
|
})
|
|
// a payload segment that is not base64url used to escape as a bare TypeError
|
|
t.throws(() => UnsecuredJWT.decode('eyJhbGciOiJub25lIn0.++++.'), {
|
|
code: 'ERR_JWT_INVALID',
|
|
message: 'Failed to base64url decode the payload',
|
|
})
|
|
})
|
|
|
|
test('new UnsecuredJWT()', (t) => {
|
|
t.is(new UnsecuredJWT().encode(), 'eyJhbGciOiJub25lIn0.e30.')
|
|
})
|
|
|
|
async function testJWTsetFunction(t, method, claim, value, expected = value) {
|
|
const jwt = new UnsecuredJWT()[method](value).encode()
|
|
const claims = decodeJwt(jwt)
|
|
t.true(claim in claims)
|
|
t.is(claims[claim], expected)
|
|
}
|
|
testJWTsetFunction.title = (title, method, claim, value) =>
|
|
`UnsecuredJWT.prototype.${method} called with ${
|
|
value?.constructor?.name || typeof value
|
|
} (${value})`
|
|
|
|
for (const [method, claim, vectors] of setters(now)) {
|
|
for (const [input, output = input] of vectors) {
|
|
test(testJWTsetFunction, method, claim, input, output)
|
|
}
|
|
}
|