java.lang.Object
- net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRequestObjectTest

public class ValidateRequestObjectTest
extends Object

ValidateRequestObject unit test.

Field Summary

Fields
Modifier and Type	Field	Description
`private net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRequestObject`	`action`
`private String`	`issuer`
`private KeyPair`	`kp`
`private net.shibboleth.oidc.metadata.context.OIDCMetadataContext`	`oidcCtx`
`private OIDCAuthenticationResponseContext`	`oidcRespCtx`
`private ProfileRequestContext`	`prc`
`private RequestContext`	`requestCtx`

Constructor Summary

Constructors
Constructor Description

ValidateRequestObjectTest()

Method Summary

All Methods Instance Methods Concrete Methods
Modifier and Type	Method	Description
`protected net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator`	`buildPlainClaimsValidation()`
`protected net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator`	`buildSignedClaimsValidation(String clientId)`
`void`	`setup()`
`void`	`testInitFailsNoPlainValidator()`
`void`	`testInitFailsNoSignedValidators()`
`void`	`testInitFailsNoValidators()`
`void`	`testInitSuccess()`
`void`	`testPlainExpiredRequestObject()`
`void`	`testPlainNotBeforeInFutureRequestObject()`
`void`	`testRequestObjectAlgMatch()`	Test success case of having non signed request object and registered algorithm 'none'
`void`	`testRequestObjectAlgMismatch()`	Test failure case of having non signed request object and registered algorithm other than 'none'
`void`	`testRequestObjectClientMismatch()`	Test failure case of mismatch in client_id values
`void`	`testRequestObjectClientRespTypeMatch()`	Test success in case of matching client_id and response_type values
`void`	`testRequestObjectClientRespTypeMatchWithExpNbf()`
`void`	`testRequestObjectNoMatchingClaims()`	Test success in case of having non signed request object and no registered algorithm
`void`	`testRequestObjectRespTypeMismatch()`	Test failure in case of mismatch in response_type values
`void`	`testRequestObjectSignedNotVerified()`	Test case of signature not matching any key.
`void`	`testRequestObjectSignedWithRS256()`	Test success case of RS256 signed request object.
`void`	`testRequestObjectSignedWithRS256NoCredsInSecParams()`	Test signed request object but no credentials is sec params.
`void`	`testRequestObjectSignedWithRS256NoSecParams()`	Test signed request object but no sec params.
`void`	`testRequestObjectSignedWithRS256NoSecParamsCtxt()`	Test signed request object but no sec params context.
`void`	`testRequestObjectSignedWithUnexpectedAlgorithm()`	Test case of request object signed with wrong type of algorithm.
`void`	`testRequestObjectWithExpNbfSignedWithRS256()`
`void`	`testSignedExpiredRequestObject()`
`void`	`testSignedNoAudienceRequstObject()`
`void`	`testSignedNoIssuerRequstObject()`
`void`	`testSignedNotBeforeInFutureRequestObject()`
`void`	`testSignedWrongAudienceRequstObject()`
`void`	`testSignedWrongIssuerRequstObject()`
`void`	`testSuccessNoObject()`	Test that success in case of not having request object

Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

prc
```
private ProfileRequestContext prc
```

action

private net.shibboleth.idp.plugin.oidc.op.profile.impl.ValidateRequestObject action

requestCtx
```
private RequestContext requestCtx
```

oidcCtx

private net.shibboleth.oidc.metadata.context.OIDCMetadataContext oidcCtx

oidcRespCtx

private OIDCAuthenticationResponseContext oidcRespCtx

kp
```
private KeyPair kp
```

issuer
```
private String issuer
```

Constructor Detail
- ValidateRequestObjectTest
```
public ValidateRequestObjectTest()
```

Method Detail

setup

@BeforeMethod
public void setup()
           throws ComponentInitializationException,
                  NoSuchAlgorithmException

Throws:: ComponentInitializationException; NoSuchAlgorithmException

buildSignedClaimsValidation

protected net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator buildSignedClaimsValidation(String clientId)

buildPlainClaimsValidation

protected net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator buildPlainClaimsValidation()

testInitFailsNoValidators

public void testInitFailsNoValidators()
                               throws ComponentInitializationException

Throws:: ComponentInitializationException

testInitFailsNoPlainValidator

public void testInitFailsNoPlainValidator()
                                   throws ComponentInitializationException

Throws:: ComponentInitializationException

testInitFailsNoSignedValidators

public void testInitFailsNoSignedValidators()
                                     throws ComponentInitializationException

Throws:: ComponentInitializationException

testInitSuccess

public void testInitSuccess()
                     throws ComponentInitializationException

Throws:: ComponentInitializationException

testSuccessNoObject

public void testSuccessNoObject()
                         throws NoSuchAlgorithmException,
                                ComponentInitializationException,
                                URISyntaxException

Test that success in case of not having request object

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException

testRequestObjectNoMatchingClaims

public void testRequestObjectNoMatchingClaims()
                                       throws NoSuchAlgorithmException,
                                              ComponentInitializationException,
                                              URISyntaxException

Test success in case of having non signed request object and no registered algorithm

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException

testRequestObjectAlgMismatch

public void testRequestObjectAlgMismatch()
                                  throws NoSuchAlgorithmException,
                                         ComponentInitializationException,
                                         URISyntaxException

Test failure case of having non signed request object and registered algorithm other than 'none'

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException

testRequestObjectAlgMatch

public void testRequestObjectAlgMatch()
                               throws NoSuchAlgorithmException,
                                      ComponentInitializationException,
                                      URISyntaxException

Test success case of having non signed request object and registered algorithm 'none'

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException

testRequestObjectClientMismatch

public void testRequestObjectClientMismatch()
                                     throws NoSuchAlgorithmException,
                                            ComponentInitializationException,
                                            URISyntaxException

Test failure case of mismatch in client_id values

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException

testRequestObjectRespTypeMismatch

public void testRequestObjectRespTypeMismatch()
                                       throws NoSuchAlgorithmException,
                                              ComponentInitializationException,
                                              URISyntaxException

Test failure in case of mismatch in response_type values

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException

testRequestObjectClientRespTypeMatch

public void testRequestObjectClientRespTypeMatch()
                                          throws NoSuchAlgorithmException,
                                                 ComponentInitializationException,
                                                 URISyntaxException

Test success in case of matching client_id and response_type values

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException

testRequestObjectClientRespTypeMatchWithExpNbf

public void testRequestObjectClientRespTypeMatchWithExpNbf()
                                                    throws NoSuchAlgorithmException,
                                                           ComponentInitializationException,
                                                           URISyntaxException

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException

testRequestObjectSignedWithRS256

public void testRequestObjectSignedWithRS256()
                                      throws NoSuchAlgorithmException,
                                             ComponentInitializationException,
                                             URISyntaxException,
                                             com.nimbusds.jose.JOSEException,
                                             InvalidAlgorithmParameterException

Test success case of RS256 signed request object.

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException; com.nimbusds.jose.JOSEException; InvalidAlgorithmParameterException

testRequestObjectWithExpNbfSignedWithRS256

public void testRequestObjectWithExpNbfSignedWithRS256()
                                                throws NoSuchAlgorithmException,
                                                       ComponentInitializationException,
                                                       URISyntaxException,
                                                       com.nimbusds.jose.JOSEException,
                                                       InvalidAlgorithmParameterException

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException; com.nimbusds.jose.JOSEException; InvalidAlgorithmParameterException

testRequestObjectSignedNotVerified

public void testRequestObjectSignedNotVerified()
                                        throws NoSuchAlgorithmException,
                                               ComponentInitializationException,
                                               URISyntaxException,
                                               com.nimbusds.jose.JOSEException,
                                               InvalidAlgorithmParameterException

Test case of signature not matching any key.

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException; com.nimbusds.jose.JOSEException; InvalidAlgorithmParameterException

testRequestObjectSignedWithUnexpectedAlgorithm

public void testRequestObjectSignedWithUnexpectedAlgorithm()
                                                    throws NoSuchAlgorithmException,
                                                           ComponentInitializationException,
                                                           URISyntaxException,
                                                           com.nimbusds.jose.JOSEException,
                                                           InvalidAlgorithmParameterException

Test case of request object signed with wrong type of algorithm.

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException; com.nimbusds.jose.JOSEException; InvalidAlgorithmParameterException

testRequestObjectSignedWithRS256NoSecParamsCtxt

public void testRequestObjectSignedWithRS256NoSecParamsCtxt()
                                                     throws NoSuchAlgorithmException,
                                                            ComponentInitializationException,
                                                            URISyntaxException,
                                                            com.nimbusds.jose.JOSEException,
                                                            InvalidAlgorithmParameterException

Test signed request object but no sec params context.

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException; com.nimbusds.jose.JOSEException; InvalidAlgorithmParameterException

testRequestObjectSignedWithRS256NoSecParams

public void testRequestObjectSignedWithRS256NoSecParams()
                                                 throws NoSuchAlgorithmException,
                                                        ComponentInitializationException,
                                                        URISyntaxException,
                                                        com.nimbusds.jose.JOSEException,
                                                        InvalidAlgorithmParameterException

Test signed request object but no sec params.

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException; com.nimbusds.jose.JOSEException; InvalidAlgorithmParameterException

testRequestObjectSignedWithRS256NoCredsInSecParams

public void testRequestObjectSignedWithRS256NoCredsInSecParams()
                                                        throws NoSuchAlgorithmException,
                                                               ComponentInitializationException,
                                                               URISyntaxException,
                                                               com.nimbusds.jose.JOSEException,
                                                               InvalidAlgorithmParameterException

Test signed request object but no credentials is sec params.

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException; com.nimbusds.jose.JOSEException; InvalidAlgorithmParameterException

testSignedExpiredRequestObject

public void testSignedExpiredRequestObject()
                                    throws NoSuchAlgorithmException,
                                           ComponentInitializationException,
                                           URISyntaxException,
                                           com.nimbusds.jose.JOSEException,
                                           InvalidAlgorithmParameterException

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException; com.nimbusds.jose.JOSEException; InvalidAlgorithmParameterException

testSignedNotBeforeInFutureRequestObject

public void testSignedNotBeforeInFutureRequestObject()
                                              throws NoSuchAlgorithmException,
                                                     ComponentInitializationException,
                                                     URISyntaxException,
                                                     com.nimbusds.jose.JOSEException,
                                                     InvalidAlgorithmParameterException

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException; com.nimbusds.jose.JOSEException; InvalidAlgorithmParameterException

testSignedNoIssuerRequstObject

public void testSignedNoIssuerRequstObject()
                                    throws NoSuchAlgorithmException,
                                           ComponentInitializationException,
                                           URISyntaxException,
                                           com.nimbusds.jose.JOSEException,
                                           InvalidAlgorithmParameterException

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException; com.nimbusds.jose.JOSEException; InvalidAlgorithmParameterException

testSignedWrongIssuerRequstObject

public void testSignedWrongIssuerRequstObject()
                                       throws NoSuchAlgorithmException,
                                              ComponentInitializationException,
                                              URISyntaxException,
                                              com.nimbusds.jose.JOSEException,
                                              InvalidAlgorithmParameterException

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException; com.nimbusds.jose.JOSEException; InvalidAlgorithmParameterException

testSignedNoAudienceRequstObject

public void testSignedNoAudienceRequstObject()
                                      throws NoSuchAlgorithmException,
                                             ComponentInitializationException,
                                             URISyntaxException,
                                             com.nimbusds.jose.JOSEException,
                                             InvalidAlgorithmParameterException

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException; com.nimbusds.jose.JOSEException; InvalidAlgorithmParameterException

testSignedWrongAudienceRequstObject

public void testSignedWrongAudienceRequstObject()
                                         throws NoSuchAlgorithmException,
                                                ComponentInitializationException,
                                                URISyntaxException,
                                                com.nimbusds.jose.JOSEException,
                                                InvalidAlgorithmParameterException

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException; com.nimbusds.jose.JOSEException; InvalidAlgorithmParameterException

testPlainExpiredRequestObject

public void testPlainExpiredRequestObject()
                                   throws NoSuchAlgorithmException,
                                          ComponentInitializationException,
                                          URISyntaxException,
                                          com.nimbusds.jose.JOSEException,
                                          InvalidAlgorithmParameterException

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException; com.nimbusds.jose.JOSEException; InvalidAlgorithmParameterException

testPlainNotBeforeInFutureRequestObject

public void testPlainNotBeforeInFutureRequestObject()
                                             throws NoSuchAlgorithmException,
                                                    ComponentInitializationException,
                                                    URISyntaxException,
                                                    com.nimbusds.jose.JOSEException,
                                                    InvalidAlgorithmParameterException

Throws:: NoSuchAlgorithmException; ComponentInitializationException; URISyntaxException; com.nimbusds.jose.JOSEException; InvalidAlgorithmParameterException

Class ValidateRequestObjectTest