Function extract_payload

crates/client-api/src/auth.rs:343–376

()

    // Test that extracting a JWT payload from a valid token gets the json representation.
    #[tokio::test]
    async fn extract_payload() -> Result<(), anyhow::Error> {
        let kp = JwtKeys::generate()?;

        let dummy_audience: Box<str> = "spacetimedb".into();
        let claims = TokenClaims {
            issuer: "localhost".into(),
            subject: "test-subject".into(),
            audience: [dummy_audience.clone()].into(),
            extra: None,
        };
        let (_, token) = claims.encode_and_sign(&kp.private)?;
        let st_creds = SpacetimeCreds::from_signed_token(token);
        let payload = st_creds
            .extract_jwt_payload_string()
            .ok_or_else(|| anyhow::anyhow!("Failed to extract JWT payload"))?;
        // Make sure it is valid json.
        let parsed: serde_json::Value = serde_json::from_str(&payload)?;
        assert_eq!(parsed.get("iss").unwrap().as_str().unwrap(), &*claims.issuer);
        assert_eq!(parsed.get("sub").unwrap().as_str().unwrap(), &*claims.subject);
        assert_eq!(
            parsed.get("aud").unwrap().as_array().unwrap()[0].as_str().unwrap(),
            &*dummy_audience
        );
        let as_object = parsed
            .as_object()
            .ok_or_else(|| anyhow::anyhow!("Failed to parse JWT payload as object"))?;
        let keys: HashSet<String> = as_object.keys().map(|s| s.to_string()).collect();
        let expected_keys = vec!["iss", "sub", "aud", "iat", "exp", "hex_identity"]
            .into_iter()
            .map(|s| s.to_string())
            .collect::<HashSet<String>>();
        assert_eq!(keys, expected_keys);
        Ok(())
    }

    #[tokio::test]
    async fn authorization_rejection_custom_uses_display_message() -> Result<(), anyhow::Error> {