Function TestResuseKeySource

auth/keys_test.go:16–75

(t *testing.T)

)

func TestResuseKeySource(t *testing.T) {
	testTime := time.Date(2018, 10, 29, 12, 0, 0, 0, time.UTC)

	TimeNow = func() time.Time { return testTime }

	firstKeys, err := NewPublicKeySetFromJSON([]byte(testGoogleCerts), 1*time.Second)
	if err != nil {
		t.Errorf("unexpected error creating key set: %s", err)
		return
	}

	nextKeys := PublicKeySet{
		Expiry: testTime.Add(2 * time.Second),
		Keys: map[string]*rsa.PublicKey{
			"8289d54280b76712de41cd2ef95972b123be9ac0": &rsa.PublicKey{N: testGoogle(testGoogleKey2), E: 65537},
		},
	}

	reuser := NewReusePublicKeySource(firstKeys, testKeySource{keys: nextKeys})

	// first get, firstKeys are not expired and should be returned

	gotKeys, err := reuser.Get(context.Background())
	if err != nil {
		t.Errorf("unexpected error getting keys: %s", err)
		return
	}
	if !cmp.Equal(gotKeys, firstKeys, cmpopts.IgnoreUnexported(big.Int{})) {
		t.Errorf("first keys did not match expectations: %s", cmp.Diff(gotKeys, firstKeys,
			cmpopts.IgnoreUnexported(big.Int{})))
		return
	}

	// move time forward, expire the first keys
	TimeNow = func() time.Time { return testTime.Add(1500 * time.Millisecond) }

	gotKeys, err = reuser.Get(context.Background())
	if err != nil {
		t.Errorf("unexpected error getting keys: %s", err)
		return
	}
	if !cmp.Equal(gotKeys, nextKeys, cmpopts.IgnoreUnexported(big.Int{})) {
		t.Errorf("next keys did not match expectations: %s", cmp.Diff(gotKeys, nextKeys,
			cmpopts.IgnoreUnexported(big.Int{})))
		return
	}

	// verify get works
	k, err := gotKeys.GetKey("8289d54280b76712de41cd2ef95972b123be9ac0")
	if err != nil {
		t.Errorf("unexpected error getting key: %s", err)
	}
	if !cmp.Equal(k, nextKeys.Keys["8289d54280b76712de41cd2ef95972b123be9ac0"],
		cmpopts.IgnoreUnexported(big.Int{})) {
		t.Errorf("next keys did not match expectations: %s",
			cmp.Diff(k, nextKeys.Keys["8289d54280b76712de41cd2ef95972b123be9ac0"],
				cmpopts.IgnoreUnexported(big.Int{})))
		return