-
Notifications
You must be signed in to change notification settings - Fork 182
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
make jwe token verification compatible with RFC (#45)
* make jwe token verification compatible with RFC * update docs * fix globals
- Loading branch information
Showing
3 changed files
with
229 additions
and
33 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,170 @@ | ||
| use Test::Nginx::Socket::Lua; | ||
|
|
||
| repeat_each(2); | ||
|
|
||
| plan tests => repeat_each() * (3 * blocks()); | ||
|
|
||
| our $HttpConfig = <<'_EOC_'; | ||
| lua_package_path 'lib/?.lua;;'; | ||
| _EOC_ | ||
| no_long_string(); | ||
| run_tests(); | ||
| __DATA__ | ||
| === TEST 1: Verify A256CBC-HS512 Direct Encryption with a Shared Symmetric Key | ||
| --- http_config eval: $::HttpConfig | ||
| --- config | ||
| location /t { | ||
| content_by_lua ' | ||
| local jwt = require "resty.jwt" | ||
| local cjson = require "cjson" | ||
| local shared_key = "12341234123412341234123412341234" .. | ||
| "12341234123412341234123412341234" | ||
| local jwt_obj = jwt:verify( | ||
| shared_key, | ||
| "eyJhbGciOiJkaXIiLCJlbmMiOiJBMjU2Q0JDLUhTNTEyIn0." .. | ||
| ".M927Z_hNTmumFQE0rtRQCQ.nnd7AoE_2dgvws2-iay8qA.d" .. | ||
| "kyZuuks4Qm9Cd7VfEVSs07pi_Kyt0INVHTTesUC2BM" | ||
| ) | ||
| ngx.say( | ||
| cjson.encode(jwt_obj) | ||
| ) | ||
| '; | ||
| } | ||
| --- request | ||
| GET /t | ||
| --- response_body | ||
| {"payload":{"foo":"bar"},"reason":"everything is awesome~ :p","header":{"alg":"dir","enc":"A256CBC-HS512"},"valid":true,"verified":true} | ||
| --- no_error_log | ||
| [error] | ||
| === TEST 2: Verify A128CBC-HS256 Direct Encryption with a Shared Symmetric Key | ||
| --- http_config eval: $::HttpConfig | ||
| --- config | ||
| location /t { | ||
| content_by_lua ' | ||
| local jwt = require "resty.jwt" | ||
| local cjson = require "cjson" | ||
| local shared_key = "12341234123412341234123412341234" | ||
| local jwt_obj = jwt:verify( | ||
| shared_key, | ||
| "eyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0." .. | ||
| ".U6emIwy_yVkagUwQ4EjdFA.FrapgQVvG3uictQz9NPPMw.n" .. | ||
| "MoW0ShdgCN0JHw472SJjQ" | ||
| ) | ||
| ngx.say( | ||
| cjson.encode(jwt_obj) | ||
| ) | ||
| '; | ||
| } | ||
| --- request | ||
| GET /t | ||
| --- response_body | ||
| {"payload":{"foo":"bar"},"reason":"everything is awesome~ :p","header":{"alg":"dir","enc":"A128CBC-HS256"},"valid":true,"verified":true} | ||
| --- no_error_log | ||
| [error] | ||
| === TEST 3: Dont fail if extra chars added | ||
| --- http_config eval: $::HttpConfig | ||
| --- config | ||
| location /t { | ||
| content_by_lua ' | ||
| local jwt = require "resty.jwt" | ||
| local cjson = require "cjson" | ||
| local shared_key = "12341234123412341234123412341234" | ||
| local jwt_obj = jwt:verify( | ||
| shared_key, | ||
| "eyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0." .. | ||
| ".U6emIwy_yVkagUwQ4EjdFA.FrapgQVvG3uictQz9NPPMw.n" .. | ||
| "MoW0ShdgCN0JHw472SJjQ" .. | ||
| "xxx" | ||
| ) | ||
| ngx.say( | ||
| "valid: ", jwt_obj.valid, "\\n", | ||
| "verified: ", jwt_obj.verified | ||
| ) | ||
| '; | ||
| } | ||
| --- request | ||
| GET /t | ||
| --- response_body | ||
| valid: true | ||
| verified: false | ||
| --- no_error_log | ||
| [error] | ||
| === TEST 4: Encode A128CBC-HS256 Direct Encryption | ||
| --- http_config eval: $::HttpConfig | ||
| --- config | ||
| location /t { | ||
| content_by_lua ' | ||
| local jwt = require "resty.jwt" | ||
| local cjson = require "cjson" | ||
| local shared_key = "12341234123412341234123412341234" | ||
| local table_of_jwt = { | ||
| header = { alg = "dir", enc = "A128CBC-HS256" }, | ||
| payload = { foo = "bar" }, | ||
| } | ||
| local jwt_token = jwt:sign(shared_key, table_of_jwt) | ||
| local jwt_obj = jwt:verify(shared_key, jwt_token) | ||
| ngx.say( | ||
| cjson.encode(table_of_jwt.payload) == cjson.encode(jwt_obj.payload), "\\n", | ||
| "valid: ", jwt_obj.valid, "\\n", | ||
| "verified: ", jwt_obj.verified | ||
| ) | ||
| '; | ||
| } | ||
| --- request | ||
| GET /t | ||
| --- response_body | ||
| true | ||
| valid: true | ||
| verified: true | ||
| --- no_error_log | ||
| [error] | ||
| === TEST 5: Encode A256CBC-HS512 Direct Encryption | ||
| --- http_config eval: $::HttpConfig | ||
| --- config | ||
| location /t { | ||
| content_by_lua ' | ||
| local jwt = require "resty.jwt" | ||
| local cjson = require "cjson" | ||
| local shared_key = "12341234123412341234123412341234" .. | ||
| "12341234123412341234123412341234" | ||
| local table_of_jwt = { | ||
| header = { alg = "dir", enc = "A256CBC-HS512" }, | ||
| payload = { foo = "bar" }, | ||
| } | ||
| local jwt_token = jwt:sign(shared_key, table_of_jwt) | ||
| local jwt_obj = jwt:verify(shared_key, jwt_token) | ||
| ngx.say( | ||
| cjson.encode(table_of_jwt.payload) == cjson.encode(jwt_obj.payload), "\\n", | ||
| "valid: ", jwt_obj.valid, "\\n", | ||
| "verified: ", jwt_obj.verified | ||
| ) | ||
| '; | ||
| } | ||
| --- request | ||
| GET /t | ||
| --- response_body | ||
| true | ||
| valid: true | ||
| verified: true | ||
| --- no_error_log | ||
| [error] |