Package net.shibboleth.idp.plugin.oidc.op.profile.flow

Class IssuedSignedJWTTest

java.lang.Object

org.springframework.test.context.testng.AbstractTestNGSpringContextTests

net.shibboleth.idp.test.flows.AbstractFlowTest

net.shibboleth.idp.plugin.oidc.op.profile.flow.AbstractOidcFlowTest

net.shibboleth.idp.plugin.oidc.op.profile.flow.AbstractIssuedJWTSecurityTest

net.shibboleth.idp.plugin.oidc.op.profile.flow.IssuedSignedJWTTest

All Implemented Interfaces:

Aware, ApplicationContextAware, org.testng.IHookable, org.testng.ITestNGListener

Direct Known Subclasses:

RequestObjectJWSTest

public class IssuedSignedJWTTest
extends AbstractIssuedJWTSecurityTest

Tests for verifying that the signature on JWT issued by OP matches the expected configuration. OP may issue JWTs from authorize, token and userinfo endpoints, depending on the RP or resource metadata.

Nested Class Summary

Nested classes/interfaces inherited from class net.shibboleth.idp.plugin.oidc.op.profile.flow.AbstractIssuedJWTSecurityTest

AbstractIssuedJWTSecurityTest.JWT_FETCHING_TYPE

Field Summary

Fields inherited from class net.shibboleth.idp.plugin.oidc.op.profile.flow.AbstractIssuedJWTSecurityTest

defaultClientId, defaultClientIdEncryptionEnforced, defaultClientSecret, defaultClientSecret64B, encryptionOptional, fetchingType

Fields inherited from class net.shibboleth.idp.plugin.oidc.op.profile.flow.AbstractOidcFlowTest

ecKey, END_STATE_ID, endStateId, flowId, rsaPrivateKey, rsaPublicKey, storageService

Fields inherited from class net.shibboleth.idp.test.flows.AbstractFlowTest

builderFactory, certFactoryBean, directoryServer, END_STATE_OUTPUT_ATTR_EXPR, END_STATE_OUTPUT_ATTR_NAME, externalContext, flowExecutor, idGenerator, IDP_ENTITY_ID, idpCredential, IP_ADDRESS_AUTHN_FLOW_ID, IP_ADDRESS_AUTHN_MAP_BEAN_NAME, KEYSTORE_FILE, LDIF_FILE, marshallerFactory, parserPool, request, response, SAML1_TRANSFORM_C14N_BEAN_NAME, SAML2_TRANSFORM_C14N_BEAN_NAME, SP_ACS_URL, SP_ENTITY_ID, SP_RELAY_STATE, spCredential, unmarshallerFactory

Fields inherited from class org.springframework.test.context.testng.AbstractTestNGSpringContextTests

applicationContext, logger

Constructor Summary

Constructors

Constructor	Description
IssuedSignedJWTTest(AbstractIssuedJWTSecurityTest.JWT_FETCHING_TYPE type, String flowId)

Method Summary

Modifier and Type	Method	Description
protected void	assertExcludedAlgorithm(String clientId, String clientSecret, PublicKey publicKey, com.nimbusds.jose.JWSAlgorithm jwsAlgorithm)
void	testJwtSecurity_jwtES256SigAlgAndEncNotSpecified()
void	testJwtSecurity_jwtES384SigAlgAndEncNotSpecified()
void	testJwtSecurity_jwtES512SigAlgAndEncNotSpecified()
void	testJwtSecurity_jwtHS256SigAlgAndEncNotSpecified_32BKey()
void	testJwtSecurity_jwtHS256SigAlgAndEncNotSpecified_64BKey()
void	testJwtSecurity_jwtHS256SigAlgAndEncNotSpecified_NoKey()
void	testJwtSecurity_jwtHS384SigAlgAndEncNotSpecified_32BKey()
void	testJwtSecurity_jwtHS384SigAlgAndEncNotSpecified_64BKey()
void	testJwtSecurity_jwtHS384SigAlgAndEncNotSpecified_NoKey()
void	testJwtSecurity_jwtHS512SigAlgAndEncNotSpecified_32BKey()
void	testJwtSecurity_jwtHS512SigAlgAndEncNotSpecified_64BKey()
void	testJwtSecurity_jwtHS512SigAlgAndEncNotSpecified_NoKey()
void	testJwtSecurity_jwtPS256SigAlgAndEncNotSpecified()
void	testJwtSecurity_jwtPS384SigAlgAndEncNotSpecified()
void	testJwtSecurity_jwtPS512SigAlgAndEncNotSpecified()
void	testJwtSecurity_jwtRS256SigAlgAndEncNotSpecified()
void	testJwtSecurity_jwtRS384SigAlgAndEncNotSpecified()
void	testJwtSecurity_jwtRS512SigAlgAndEncNotSpecified()
void	testJwtSecurity_jwtSigAlgAndEncNotSpecified()

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.flow.AbstractIssuedJWTSecurityTest

assertAndDecryptJwt, assertEncryptedJwt, assertEncryptedSignedJwt, assertEncryptedSignedJwt, assertNoJwtResponse, assertNoJwtResponse, assertNoJwtResponse, assertSignedJwt, assertSignedJwt, assertSignedJwt, obtainAccessTokenFromAuthorizeEndpoint, obtainIdTokenFromAuthorizeEndpoint, obtainIdTokenFromTokenEndpoint, obtainJwt, obtainJwt, obtainJwt, obtainJwt, obtainJwtAccessTokenFromTokenEndpoint, obtainUserInfoAsJwt, obtainUserInfoResponse, obtainUserInfoResponse, parseEncryptedOrSignedJWT

Methods inherited from class net.shibboleth.idp.plugin.oidc.op.profile.flow.AbstractOidcFlowTest

assertErrorCode, assertErrorDescriptionContains, buildJsonForLegacyToken, buildJWKSet, buildMetadataSkeleton, buildToken, buildToken, buildToken, createEncryptedJWT, createEncryptedJWT, createEncryptedJWT, createPrivateKeyJWT, createPrivateKeyJWT, createPrivateKeyJWT, createSecretJWT, createSecretJWT, generateNewKeyPair, generateNewKeyPair, getDataSealer, initializeECKey, initializeMocks, initializeThreadLocals, initKeys, loadCredential, loadEncryptionCredential, loadES384SigningCredential, loadES512SigningCredential, loadESSigningCredential, loadRSSigningCredential, parseErrorResponse, parseResponse, parseSuccessResponse, removeMetadata, setBasicAuth, setHttpFormRequest, setHttpFormRequest, setJsonRequest, setRequest, setRequest, storeConsent, storeMetadata, storeMetadata, storeMetadata, storeMetadata, storeMetadata, storeMetadata, storeMetadata, storeMetadata, storeMetadata, storeMetadata, storeMetadata, storeMetadataObject

Methods inherited from class net.shibboleth.idp.test.flows.AbstractFlowTest

assertFlowExecutionOutcome, assertFlowExecutionOutcome, assertFlowExecutionResult, assertProfileRequestContext, buildSOAP11Envelope, clearThreadLocals, getFlow, initializeFlowExecutor, initializeXMLObjectSupport, overrideEndStateOutput, overrideEndStateOutput, registerFlowsInParentRegistry, retrieveProfileRequestContext, setupDirectoryServer, teardownDirectoryServer

Methods inherited from class org.springframework.test.context.testng.AbstractTestNGSpringContextTests

run, setApplicationContext, springTestContextAfterTestClass, springTestContextAfterTestMethod, springTestContextBeforeTestClass, springTestContextBeforeTestMethod, springTestContextPrepareTestInstance

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

IssuedSignedJWTTest

public IssuedSignedJWTTest(AbstractIssuedJWTSecurityTest.JWT_FETCHING_TYPE type,
                           String flowId)

Method Detail

testJwtSecurity_jwtSigAlgAndEncNotSpecified

public void testJwtSecurity_jwtSigAlgAndEncNotSpecified()
                                                 throws Exception

Throws:

Exception

testJwtSecurity_jwtRS256SigAlgAndEncNotSpecified

public void testJwtSecurity_jwtRS256SigAlgAndEncNotSpecified()
                                                      throws Exception

Throws:

Exception

testJwtSecurity_jwtRS384SigAlgAndEncNotSpecified

public void testJwtSecurity_jwtRS384SigAlgAndEncNotSpecified()
                                                      throws Exception

Throws:

Exception

testJwtSecurity_jwtRS512SigAlgAndEncNotSpecified

public void testJwtSecurity_jwtRS512SigAlgAndEncNotSpecified()
                                                      throws Exception

Throws:

Exception

testJwtSecurity_jwtPS256SigAlgAndEncNotSpecified

public void testJwtSecurity_jwtPS256SigAlgAndEncNotSpecified()
                                                      throws Exception

Throws:

Exception

testJwtSecurity_jwtPS384SigAlgAndEncNotSpecified

public void testJwtSecurity_jwtPS384SigAlgAndEncNotSpecified()
                                                      throws Exception

Throws:

Exception

testJwtSecurity_jwtPS512SigAlgAndEncNotSpecified

public void testJwtSecurity_jwtPS512SigAlgAndEncNotSpecified()
                                                      throws Exception

Throws:

Exception

testJwtSecurity_jwtES256SigAlgAndEncNotSpecified

public void testJwtSecurity_jwtES256SigAlgAndEncNotSpecified()
                                                      throws Exception

Throws:

Exception

testJwtSecurity_jwtES384SigAlgAndEncNotSpecified

public void testJwtSecurity_jwtES384SigAlgAndEncNotSpecified()
                                                      throws Exception

Throws:

Exception

assertExcludedAlgorithm

protected void assertExcludedAlgorithm(String clientId,
                                       String clientSecret,
                                       PublicKey publicKey,
                                       com.nimbusds.jose.JWSAlgorithm jwsAlgorithm)
                                throws ParseException,
                                       DataSealerException,
                                       IOException

Throws:

ParseException

DataSealerException

IOException

testJwtSecurity_jwtES512SigAlgAndEncNotSpecified

public void testJwtSecurity_jwtES512SigAlgAndEncNotSpecified()
                                                      throws Exception

Throws:

Exception

testJwtSecurity_jwtHS256SigAlgAndEncNotSpecified_32BKey

public void testJwtSecurity_jwtHS256SigAlgAndEncNotSpecified_32BKey()
                                                             throws Exception

Throws:

Exception

testJwtSecurity_jwtHS384SigAlgAndEncNotSpecified_32BKey

public void testJwtSecurity_jwtHS384SigAlgAndEncNotSpecified_32BKey()
                                                             throws Exception

Throws:

Exception

testJwtSecurity_jwtHS512SigAlgAndEncNotSpecified_32BKey

public void testJwtSecurity_jwtHS512SigAlgAndEncNotSpecified_32BKey()
                                                             throws Exception

Throws:

Exception

testJwtSecurity_jwtHS256SigAlgAndEncNotSpecified_64BKey

public void testJwtSecurity_jwtHS256SigAlgAndEncNotSpecified_64BKey()
                                                             throws Exception

Throws:

Exception

testJwtSecurity_jwtHS384SigAlgAndEncNotSpecified_64BKey

public void testJwtSecurity_jwtHS384SigAlgAndEncNotSpecified_64BKey()
                                                             throws Exception

Throws:

Exception

testJwtSecurity_jwtHS512SigAlgAndEncNotSpecified_64BKey

public void testJwtSecurity_jwtHS512SigAlgAndEncNotSpecified_64BKey()
                                                             throws Exception

Throws:

Exception

testJwtSecurity_jwtHS256SigAlgAndEncNotSpecified_NoKey

public void testJwtSecurity_jwtHS256SigAlgAndEncNotSpecified_NoKey()
                                                            throws Exception

Throws:

Exception

testJwtSecurity_jwtHS384SigAlgAndEncNotSpecified_NoKey

public void testJwtSecurity_jwtHS384SigAlgAndEncNotSpecified_NoKey()
                                                            throws Exception

Throws:

Exception

testJwtSecurity_jwtHS512SigAlgAndEncNotSpecified_NoKey

public void testJwtSecurity_jwtHS512SigAlgAndEncNotSpecified_NoKey()
                                                            throws Exception

Throws:

Exception