Package net.shibboleth.idp.plugin.oidc.op.authn.impl

Class JWTCredentialValidatorTest

java.lang.Object

org.opensaml.core.testing.OpenSAMLInitBaseTestCase

net.shibboleth.idp.authn.impl.testing.BaseAuthenticationContextTest

net.shibboleth.idp.plugin.oidc.op.authn.impl.JWTCredentialValidatorTest

public class JWTCredentialValidatorTest
extends net.shibboleth.idp.authn.impl.testing.BaseAuthenticationContextTest

Unit tests for JWTCredentialValidator.

Field Summary

Fields

Modifier and Type	Field	Description
private net.shibboleth.idp.authn.impl.ValidateCredentials	action
private net.shibboleth.oidc.jwt.claims.ClaimsValidator	claimsValidator
(package private) com.nimbusds.oauth2.sdk.id.ClientID	clientId
(package private) com.nimbusds.oauth2.sdk.auth.Secret	clientSecret
(package private) URI	endpointUri
(package private) RSAPrivateKey	rsaPrivateKey
(package private) RSAPublicKey	rsaPublicKey
private net.shibboleth.idp.plugin.oidc.op.authn.impl.JWTCredentialValidator	validator

Fields inherited from class net.shibboleth.idp.authn.impl.testing.BaseAuthenticationContextTest

authenticationFlows, prc, src

Constructor Summary

Constructors

Constructor	Description
JWTCredentialValidatorTest()

Method Summary

Modifier and Type	Method	Description
protected com.nimbusds.jwt.JWTClaimsSet	claimsSetWithExpInThePast()
protected com.nimbusds.jwt.JWTClaimsSet	claimsSetWithIatInTheFuture()
protected com.nimbusds.jwt.JWTClaimsSet	claimsSetWithoutJit()
protected void	completeSetup(com.nimbusds.oauth2.sdk.TokenRequest request, com.nimbusds.oauth2.sdk.auth.ClientAuthenticationMethod storedMethod, boolean sameSecret)
protected net.shibboleth.oidc.jwt.claims.ClaimsValidator	constructClaimsValidator(javax.servlet.http.HttpServletRequest httpRequest, ReplayCache replayCache)
protected com.nimbusds.jwt.SignedJWT	createPrivateKeyJWT(com.nimbusds.jwt.JWTClaimsSet claimsSet)
protected com.nimbusds.jwt.SignedJWT	createSecretJWT(com.nimbusds.jwt.JWTClaimsSet claimsSet)
protected com.nimbusds.jwt.SignedJWT	createSecretJWT(com.nimbusds.jwt.JWTClaimsSet claimsSet, String clientSecret)
protected void	initializeTokenRequest(com.nimbusds.oauth2.sdk.auth.ClientAuthenticationMethod method, com.nimbusds.jwt.SignedJWT jwt, boolean sameSecret)
void	initKeys()
void	setUp()
protected void	testFailingJwtAuth(com.nimbusds.oauth2.sdk.auth.ClientAuthenticationMethod method, com.nimbusds.jwt.SignedJWT jwt, boolean replay, boolean sameSecret)
void	testInvalidPrivateKeyJwt_expInThePast()
void	testInvalidPrivateKeyJwt_iatInTheFuture()
void	testInvalidPrivateKeyJwt_jitReplayDetected()
void	testInvalidPrivateKeyJwt_signature()
void	testInvalidPrivateKeyJwt_withoutJit()
void	testInvalidSecretJwt_expInThePast()
void	testInvalidSecretJwt_iatInTheFuture()
void	testInvalidSecretJwt_jitReplayDetected()
void	testInvalidSecretJwt_signature()
void	testInvalidSecretJwt_withoutJit()
void	testNoClaimsValidator()
void	testPrivateKeyJwt()
void	testSecretJwt()
protected com.nimbusds.jwt.JWTClaimsSet	validClaimsSet()

Methods inherited from class net.shibboleth.idp.authn.impl.testing.BaseAuthenticationContextTest

initializeMembers

Methods inherited from class org.opensaml.core.testing.OpenSAMLInitBaseTestCase

initOpenSAML

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

clientId

com.nimbusds.oauth2.sdk.id.ClientID clientId

clientSecret

com.nimbusds.oauth2.sdk.auth.Secret clientSecret

endpointUri

URI endpointUri

rsaPrivateKey

RSAPrivateKey rsaPrivateKey

rsaPublicKey

RSAPublicKey rsaPublicKey

claimsValidator

private net.shibboleth.oidc.jwt.claims.ClaimsValidator claimsValidator

validator

private net.shibboleth.idp.plugin.oidc.op.authn.impl.JWTCredentialValidator validator

action

private net.shibboleth.idp.authn.impl.ValidateCredentials action

Constructor Detail

JWTCredentialValidatorTest

public JWTCredentialValidatorTest()

Method Detail

initKeys

@BeforeClass
public void initKeys()
              throws NoSuchAlgorithmException

Throws:

NoSuchAlgorithmException

setUp

@BeforeMethod
public void setUp()
           throws ComponentInitializationException

Overrides:

setUp in class net.shibboleth.idp.authn.impl.testing.BaseAuthenticationContextTest

Throws:

ComponentInitializationException

completeSetup

protected void completeSetup(com.nimbusds.oauth2.sdk.TokenRequest request,
                             com.nimbusds.oauth2.sdk.auth.ClientAuthenticationMethod storedMethod,
                             boolean sameSecret)
                      throws NoSuchAlgorithmException,
                             com.nimbusds.jose.JOSEException

Throws:

NoSuchAlgorithmException

com.nimbusds.jose.JOSEException

initializeTokenRequest

protected void initializeTokenRequest(com.nimbusds.oauth2.sdk.auth.ClientAuthenticationMethod method,
                                      com.nimbusds.jwt.SignedJWT jwt,
                                      boolean sameSecret)
                               throws com.nimbusds.jose.JOSEException,
                                      NoSuchAlgorithmException

Throws:

com.nimbusds.jose.JOSEException

NoSuchAlgorithmException

constructClaimsValidator

protected net.shibboleth.oidc.jwt.claims.ClaimsValidator constructClaimsValidator(javax.servlet.http.HttpServletRequest httpRequest,
                                                                                  ReplayCache replayCache)

testFailingJwtAuth

protected void testFailingJwtAuth(com.nimbusds.oauth2.sdk.auth.ClientAuthenticationMethod method,
                                  com.nimbusds.jwt.SignedJWT jwt,
                                  boolean replay,
                                  boolean sameSecret)
                           throws Exception

Throws:

Exception

claimsSetWithIatInTheFuture

protected com.nimbusds.jwt.JWTClaimsSet claimsSetWithIatInTheFuture()

claimsSetWithExpInThePast

protected com.nimbusds.jwt.JWTClaimsSet claimsSetWithExpInThePast()

claimsSetWithoutJit

protected com.nimbusds.jwt.JWTClaimsSet claimsSetWithoutJit()

validClaimsSet

protected com.nimbusds.jwt.JWTClaimsSet validClaimsSet()

createSecretJWT

protected com.nimbusds.jwt.SignedJWT createSecretJWT(com.nimbusds.jwt.JWTClaimsSet claimsSet)
                                              throws com.nimbusds.jose.JOSEException

Throws:

com.nimbusds.jose.JOSEException

createSecretJWT

protected com.nimbusds.jwt.SignedJWT createSecretJWT(com.nimbusds.jwt.JWTClaimsSet claimsSet,
                                                     String clientSecret)
                                              throws com.nimbusds.jose.JOSEException

Throws:

com.nimbusds.jose.JOSEException

createPrivateKeyJWT

protected com.nimbusds.jwt.SignedJWT createPrivateKeyJWT(com.nimbusds.jwt.JWTClaimsSet claimsSet)
                                                  throws com.nimbusds.jose.JOSEException

Throws:

com.nimbusds.jose.JOSEException

testNoClaimsValidator

public void testNoClaimsValidator()
                           throws Exception

Throws:

Exception

testSecretJwt

public void testSecretJwt()
                   throws com.nimbusds.jose.JOSEException,
                          NoSuchAlgorithmException

Throws:

com.nimbusds.jose.JOSEException

NoSuchAlgorithmException

testPrivateKeyJwt

public void testPrivateKeyJwt()
                       throws com.nimbusds.jose.JOSEException,
                              NoSuchAlgorithmException

Throws:

com.nimbusds.jose.JOSEException

NoSuchAlgorithmException

testInvalidSecretJwt_signature

public void testInvalidSecretJwt_signature()
                                    throws Exception

Throws:

Exception

testInvalidSecretJwt_iatInTheFuture

public void testInvalidSecretJwt_iatInTheFuture()
                                         throws Exception

Throws:

Exception

testInvalidSecretJwt_expInThePast

public void testInvalidSecretJwt_expInThePast()
                                       throws Exception

Throws:

Exception

testInvalidSecretJwt_withoutJit

public void testInvalidSecretJwt_withoutJit()
                                     throws Exception

Throws:

Exception

testInvalidSecretJwt_jitReplayDetected

public void testInvalidSecretJwt_jitReplayDetected()
                                            throws Exception

Throws:

Exception

testInvalidPrivateKeyJwt_signature

public void testInvalidPrivateKeyJwt_signature()
                                        throws Exception

Throws:

Exception

testInvalidPrivateKeyJwt_iatInTheFuture

public void testInvalidPrivateKeyJwt_iatInTheFuture()
                                             throws Exception

Throws:

Exception

testInvalidPrivateKeyJwt_expInThePast

public void testInvalidPrivateKeyJwt_expInThePast()
                                           throws Exception

Throws:

Exception

testInvalidPrivateKeyJwt_withoutJit

public void testInvalidPrivateKeyJwt_withoutJit()
                                         throws Exception

Throws:

Exception

testInvalidPrivateKeyJwt_jitReplayDetected

public void testInvalidPrivateKeyJwt_jitReplayDetected()
                                                throws Exception

Throws:

Exception