Test Suite v3

.config/nextest.toml

@@ -0,0 +1,3 @@
+# Profile to only run `tests/jwk.rs` tests.
+[profile.jwk]
+default-filter = "binary_id(jose::jwk)"

Cargo.toml

@@ -130,6 +130,10 @@ eyre = "0.6.12"
 clap = { version = "4.5.27", features = ["derive"] }
 clio = { version = "0.3.5", features = ["clap-parse"] }
 
+# For integration tests
+pretty_assertions = "1.4.1"
+rstest = "0.25.0"
+
 # For X.509 certificates of Json Web Keys
 # x509-cert = { git = "https://github.com/RustCrypto/formats.git" }
 
@@ -140,3 +144,6 @@ required-features = ["std"]
 [package.metadata.docs.rs]
 features = ["crypto-rustcrypto", "std", "deterministic-ecdsa"]
 rustdoc-args = ["--cfg", "docsrs"]
+
+[profile.dev.package.num-bigint-dig]
+opt-level = 3

devenv.nix

@@ -7,6 +7,9 @@
     cargo-udeps
     cargo-hack
     cargo-nextest
+    cargo-tarpaulin
+
+    jose
 
     openssl
     pkg-config
@@ -30,4 +33,47 @@
       "rust-src"
     ];
   };
+
+  scripts = {
+    each-crypto.exec = ''
+      CRYPTO_FEATURES="$(cat Cargo.toml | grep -o 'crypto-[^ ]* =' | tr -d ' =' | paste -sd ',')"
+
+      cargo hack \
+        --each-feature \
+        --include-features $CRYPTO_FEATURES \
+        "$@"
+    '';
+
+    jwk-thumbprints.exec = ''
+      # write a script, that takes a list of files as arguments
+      # and calculates sha256, sha384 and sha512 thumbprints
+      # for each file, and prints the result in a table
+      # the script should be called jwk-thumbprints
+
+      files="$@"
+
+      if [ -z "$files" ]; then
+        echo "No files provided"
+        exit 1
+      fi
+
+      for file in $files; do
+        if [ ! -f "$file" ]; then
+          echo "$file is not a file"
+          continue
+        fi
+
+        echo "$file"
+
+        sha256=$(jose jwk thp -a S256 -i "$file")
+        sha384=$(jose jwk thp -a S384 -i "$file")
+        sha512=$(jose jwk thp -a S512 -i "$file")
+
+        echo -e "\tSHA256: $sha256"
+        echo -e "\tSHA384: $sha384"
+        echo -e "\tSHA512: $sha512"
+        echo -e "\n"
+      done
+    '';
+  };
 }

src/jwk/serde_impl.rs

@@ -1,4 +1,4 @@
-use alloc::vec::Vec;
+use alloc::{borrow::Cow, vec::Vec};
 use core::ops::Deref;
 
 use base64ct::{Base64, Base64UrlUnpadded, Encoding};
@@ -53,10 +53,10 @@ pub fn deserialize_ga<'de, D, const N: usize>(deserializer: D) -> Result<Option<
 where
     D: Deserializer<'de>,
 {
-    Ok(match Option::<&str>::deserialize(deserializer)? {
+    Ok(match Option::<Cow<'_, str>>::deserialize(deserializer)? {
         Some(val) => {
             let mut buf = [0u8; N];
-            Base64UrlUnpadded::decode(val, &mut buf).map_err(<D::Error as Error>::custom)?;
+            Base64UrlUnpadded::decode(&*val, &mut buf).map_err(<D::Error as Error>::custom)?;
             Some(buf)
         }
         None => None,

tests/common/mod.rs

@@ -0,0 +1,16 @@
+//! Common test helpers.
+
+use serde_json::Value;
+
+pub type TestResult<T = ()> = Result<T, Box<dyn std::error::Error>>;
+
+/// Reads a key file from the `tests/vectors/jwk` directory.
+pub fn read_jwk(name: &str) -> TestResult<Value> {
+    let json = std::fs::read_to_string(format!(
+        "{}/tests/vectors/jwk/{name}.json",
+        env!("CARGO_MANIFEST_DIR"),
+    ))?;
+    let key: Value = serde_json::from_str(&json)?;
+
+    Ok(key)
+}