Function TEST

3rdparty/libprocess/src/tests/jwt_tests.cpp:95–461

TEST(JWTTest, Parse)
{
  const string secret = "secret";

  shared_ptr<RSA> privateKey = pem_to_rsa_private_key(PRIVATE_KEY).get();
  CHECK_NOTNULL(privateKey.get());

  shared_ptr<RSA> publicKey = pem_to_rsa_public_key(PUBLIC_KEY).get();
  CHECK_NOTNULL(publicKey.get());

  shared_ptr<RSA> wrongPublicKey =
    pem_to_rsa_public_key(WRONG_PUBLIC_KEY).get();
  CHECK_NOTNULL(wrongPublicKey.get());

  auto create_hs256_token = [secret](string header, string payload) {
    header = base64::encode_url_safe(header, false);
    payload = base64::encode_url_safe(payload, false);

    const string mac =
      generate_hmac_sha256(strings::join(".", header, payload), secret).get();

    const string signature = base64::encode_url_safe(mac, false);

    return strings::join(".", header, payload, signature);
  };

  auto create_rs256_token = [privateKey](string header, string payload) {
    header = base64::encode_url_safe(header, false);
    payload = base64::encode_url_safe(payload, false);

    const string rawSignature = sign_rsa_sha256(
      strings::join(".", header, payload), privateKey).get();

    const string signature = base64::encode_url_safe(rawSignature, false);

    return strings::join(".", header, payload, signature);
  };

  // Invalid token header.
  {
    // HS256.
    {
      const string token = create_hs256_token(
          "NOT A VALID HEADER",
          "{\"exp\":9999999999,\"sub\":\"foo\"}");

      const Try<JWT, JWTError> jwt = JWT::parse(token, secret);

      EXPECT_ERROR(jwt);
    }

    // RS256.
    {
      const string token = create_rs256_token(
          "NOT A VALID HEADER",
          "{\"exp\":9999999999,\"sub\":\"foo\"}");

      const Try<JWT, JWTError> jwt = JWT::parse(token, publicKey);