IoTGateway/Security/Waher.Security.JWT.Test/JwtTests.cs at master · PeterWaher/IoTGateway · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
using System;
using System.Collections.Generic;
using System.Text;
using Microsoft.VisualStudio.TestTools.UnitTesting;
using Waher.Content;
using Waher.Runtime.Inventory;
using Waher.Security.JWS;

namespace Waher.Security.JWT.Test
{
	[TestClass]
	public class JwtTests
	{
		[AssemblyInitialize]
		public static void AssemblyInitialize(TestContext _)
		{
			Types.Initialize(
				typeof(IJwsAlgorithm).Assembly,
				typeof(JSON).Assembly);
		}

		[TestMethod]
		public void JWT_Test_01_Parse_Secure()
		{
			JwtToken Token = new("eyJ0eXAiOiJKV1QiLA0KICJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJqb2UiLA0KICJleHAiOjEzMDA4MTkzODAsDQogImh0dHA6Ly9leGFtcGxlLmNvbS9pc19yb290Ijp0cnVlfQ.dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk");

			Assert.AreEqual("JWT", Token.Type);
			Assert.IsTrue(Token.Algorithm is HmacSha256);

			Assert.AreEqual(true, Token.TryGetClaim(JwtClaims.Issuer, out object Issuer));
			Assert.AreEqual("joe", Issuer);
			Assert.AreEqual("joe", Token.Issuer);

			Assert.AreEqual(true, Token.TryGetClaim(JwtClaims.ExpirationTime, out object Expires));
			Assert.AreEqual(1300819380, Expires);
			Assert.AreEqual(new DateTime(2011, 3, 22, 18, 43, 0, DateTimeKind.Utc), Token.Expiration);

			Assert.AreEqual(true, Token.TryGetClaim("http://example.com/is_root", out object IsRoot));
			Assert.AreEqual(true, IsRoot);
		}

		[TestMethod]
		public void JWT_Test_02_Parse_Unsecure()
		{
			JwtToken Token = new("eyJhbGciOiJub25lIn0.eyJpc3MiOiJqb2UiLA0KICJleHAiOjEzMDA4MTkzODAsDQogImh0dHA6Ly9leGFtcGxlLmNvbS9pc19yb290Ijp0cnVlfQ.");

			Assert.IsNull(Token.Algorithm);

			Assert.AreEqual(true, Token.TryGetClaim(JwtClaims.Issuer, out object Issuer));
			Assert.AreEqual("joe", Issuer);
			Assert.AreEqual("joe", Token.Issuer);

			Assert.AreEqual(true, Token.TryGetClaim(JwtClaims.ExpirationTime, out object Expires));
			Assert.AreEqual(1300819380, Expires);
			Assert.AreEqual(new DateTime(2011, 3, 22, 18, 43, 0, DateTimeKind.Utc), Token.Expiration);

			Assert.AreEqual(true, Token.TryGetClaim("http://example.com/is_root", out object IsRoot));
			Assert.AreEqual(true, IsRoot);
		}

		[TestMethod]
		public void JWT_Test_03_Validate_ValidToken()
		{
			JwtToken Token = new("eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiYWRtaW4iOnRydWV9.TJVA95OrM7E2cBab30RMHrHDcEfxjoYZgeFONFh7HgQ");

			Assert.AreEqual("JWT", Token.Type);
			Assert.IsTrue(Token.Algorithm is HmacSha256);

			Assert.AreEqual(true, Token.TryGetClaim(JwtClaims.Subject, out object Subject));
			Assert.AreEqual("1234567890", Subject);
			Assert.AreEqual("1234567890", Token.Subject);

			Assert.AreEqual(true, Token.TryGetClaim("name", out object Name));
			Assert.AreEqual("John Doe", Name);

			Assert.AreEqual(true, Token.TryGetClaim("admin", out object Admin));
			Assert.AreEqual(true, Admin);

			using JwtFactory Factory = JwtFactory.CreateHmacSha256(Encoding.ASCII.GetBytes("secret"));
			Assert.AreEqual(true, Factory.IsValid(Token));
		}

		[TestMethod]
		public void JWT_Test_04_Validate_InvalidToken()
		{
			JwtToken Token = new("eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiYWRtaW4iOnRydWV9.TJVA95OrM7E2cBab30RMHrHDcEfxjoYZgeFONFh7HgQ");

			Assert.AreEqual("JWT", Token.Type);
			Assert.IsTrue(Token.Algorithm is HmacSha256);

			Assert.AreEqual(true, Token.TryGetClaim(JwtClaims.Subject, out object Subject));
			Assert.AreEqual("1234567890", Subject);
			Assert.AreEqual("1234567890", Token.Subject);

			Assert.AreEqual(true, Token.TryGetClaim("name", out object Name));
			Assert.AreEqual("John Doe", Name);

			Assert.AreEqual(true, Token.TryGetClaim("admin", out object Admin));
			Assert.AreEqual(true, Admin);

			using JwtFactory Factory = JwtFactory.CreateHmacSha256(Encoding.ASCII.GetBytes("wrong secret"));
			Assert.AreEqual(false, Factory.IsValid(Token));
		}

		[TestMethod]
		public void JWT_Test_05_CreateToken_HS256()
		{
			using JwtFactory Factory = JwtFactory.CreateHmacSha256();
			DateTime Expires = DateTime.Today.ToUniversalTime().AddDays(2);
			string TokenStr = Factory.Create(
				new KeyValuePair<string, object>(JwtClaims.Subject, "test user"),
				new KeyValuePair<string, object>(JwtClaims.ExpirationTime, Expires));
			JwtToken Token = new(TokenStr);

			Assert.AreEqual("JWT", Token.Type);
			Assert.IsTrue(Token.Algorithm is HmacSha256);

			Assert.AreEqual(true, Token.TryGetClaim(JwtClaims.Subject, out object Subject));
			Assert.AreEqual("test user", Subject);
			Assert.AreEqual("test user", Token.Subject);

			Assert.AreEqual(Expires, Token.Expiration);

			Assert.AreEqual(true, Factory.IsValid(Token));
		}

		[TestMethod]
		public void JWT_Test_06_CreateToken_RS256()
		{
			using JwtFactory Factory = JwtFactory.CreateRsa256();
			DateTime Expires = DateTime.Today.ToUniversalTime().AddDays(2);
			string TokenStr = Factory.Create(
				new KeyValuePair<string, object>(JwtClaims.Subject, "test user"),
				new KeyValuePair<string, object>(JwtClaims.ExpirationTime, Expires));
			JwtToken Token = new(TokenStr);

			Assert.AreEqual("JWT", Token.Type);
			Assert.IsTrue(Token.Algorithm is RsaSsaPkcsSha256);

			Assert.AreEqual(true, Token.TryGetClaim(JwtClaims.Subject, out object Subject));
			Assert.AreEqual("test user", Subject);
			Assert.AreEqual("test user", Token.Subject);

			Assert.AreEqual(Expires, Token.Expiration);

			Assert.AreEqual(true, Factory.IsValid(Token));
		}
	}
}