Function testECDSASigEncoding

test/jws/restrictions.test.ts:91–106

(t, alg)

testRSAenc.title = (title, alg) => `${alg} requires key modulusLength to be 2048 bits or larger`

async function testECDSASigEncoding(t, alg) {
  const { privateKey, publicKey } = await generateKeyPair(alg, { extractable: true })

  const jws = await new FlattenedSign(t.context.payload)
    .setProtectedHeader({ alg })
    .sign(privateKey)

  const derEncodedSignature = base64url.encode(
    crypto.sign(`sha${alg.slice(2, 5)}`, Buffer.from('foo'), await exportPKCS8(privateKey)),
  )

  await t.throwsAsync(flattenedVerify({ ...jws, signature: derEncodedSignature }, publicKey), {
    message: 'signature verification failed',
    code: 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED',
  })
}
testECDSASigEncoding.title = (title, alg) => `${alg} swallows invalid signature encoding errors`

test(testRSAsig, 'RS256')