mirror of
https://github.com/open-policy-agent/opa.git
synced 2026-08-12 19:32:48 -06:00
Anders Eknert
e43ef0a979
Earlier this evening I tried to run the Go [modernize](https://pkg.go.dev/golang.org/x/tools/gopls/internal/analysis/modernize) analyzer on OPA. That didn't go as planned: - https://github.com/golang/go/issues/73661 - https://github.com/golang/go/issues/73663 While we wait for that to be fixed, I figured an old-fashioned search-and-replace across the repo may work for at least the `interface{}` to `any` conversion. That should help make it easier to see the other fixes as applied by the modernize tool once it has had those issues resolved. Signed-off-by: Anders Eknert <anders@styra.com>
123 lines
3.1 KiB
Go
123 lines
3.1 KiB
Go
package jws_test
|
|
|
|
import (
|
|
"encoding/json"
|
|
"reflect"
|
|
"testing"
|
|
|
|
"github.com/open-policy-agent/opa/internal/jwx/jwa"
|
|
"github.com/open-policy-agent/opa/internal/jwx/jws"
|
|
)
|
|
|
|
func TestHeader(t *testing.T) {
|
|
jwkSrc := `{
|
|
"kty": "RSA",
|
|
"n": "0vx7agoebGcQSuuPiLJXZptN9nndrQmbXEps2aiAFbWhM78LhWx4cbbfAAtVT86zwu1RK7aPFFxuhDR1L6tSoc_BJECPebWKRXjBZCiFV4n3oknjhMstn64tZ_2W-5JsGY4Hc5n9yBXArwl93lqt7_RN5w6Cf0h4QyQ5v-65YGjQR0_FDW2QvzqY368QQMicAtaSqzs8KJZgnYb9c7d0zgdAZHzu6qMQvRL5hajrn1n91CbOpbISD08qNLyrdkt-bFTWhAI4vMQFh6WeZu0fM4lFd2NcRwr3XPksINHaQ-G_xBniIqbw0Ls1jF44-csFCur-kEgU8awapJzKnqDKgw",
|
|
"e": "AQAB",
|
|
"alg": "RS256",
|
|
"kid": "2011-04-29"
|
|
}`
|
|
|
|
privateHeaderParams := map[string]any{"one": "1", "two": "11"}
|
|
|
|
values := map[string]any{
|
|
jws.AlgorithmKey: jwa.ES256,
|
|
jws.ContentTypeKey: "example",
|
|
jws.CriticalKey: []string{"exp"},
|
|
jws.JWKKey: jwkSrc,
|
|
jws.JWKSetURLKey: "https://www.jwk.com/key.json",
|
|
jws.TypeKey: "JWT",
|
|
jws.KeyIDKey: "e9bc097a-ce51-4036-9562-d2ade882db0d",
|
|
jws.PrivateParamsKey: privateHeaderParams,
|
|
}
|
|
t.Run("RoundTrip", func(t *testing.T) {
|
|
|
|
var h jws.StandardHeaders
|
|
for k, v := range values {
|
|
err := h.Set(k, v)
|
|
if err != nil {
|
|
t.Fatalf("Set failed for %s", k)
|
|
}
|
|
got, ok := h.Get(k)
|
|
if !ok {
|
|
t.Fatalf("Set failed for %s", k)
|
|
}
|
|
if !reflect.DeepEqual(v, got) {
|
|
t.Fatalf("Values do not match: (%v, %v)", v, got)
|
|
}
|
|
}
|
|
})
|
|
t.Run("JSON Marshal Unmarshal", func(t *testing.T) {
|
|
|
|
var h jws.StandardHeaders
|
|
for k, v := range values {
|
|
err := h.Set(k, v)
|
|
if err != nil {
|
|
t.Fatalf("Set failed for %s", k)
|
|
}
|
|
got, ok := h.Get(k)
|
|
if !ok {
|
|
t.Fatalf("Set failed for %s", k)
|
|
}
|
|
if !reflect.DeepEqual(v, got) {
|
|
t.Fatalf("Values do not match: (%v, %v)", v, got)
|
|
}
|
|
}
|
|
hByte, err := json.Marshal(h)
|
|
if err != nil {
|
|
t.Fatal("Failed to JSON marshal")
|
|
}
|
|
var hNew jws.StandardHeaders
|
|
err = json.Unmarshal(hByte, &hNew)
|
|
if err != nil {
|
|
t.Fatal("Failed to JSON marshal")
|
|
}
|
|
})
|
|
t.Run("RoundTripError", func(t *testing.T) {
|
|
|
|
type dummyStruct struct {
|
|
dummy1 int
|
|
dummy2 float64
|
|
}
|
|
dummy := &dummyStruct{1, 3.4}
|
|
|
|
values := map[string]any{
|
|
jws.AlgorithmKey: dummy,
|
|
jws.ContentTypeKey: dummy,
|
|
jws.CriticalKey: dummy,
|
|
jws.JWKKey: dummy,
|
|
jws.JWKSetURLKey: dummy,
|
|
jws.KeyIDKey: dummy,
|
|
jws.TypeKey: dummy,
|
|
jws.PrivateParamsKey: dummy,
|
|
"invalid key": "",
|
|
}
|
|
|
|
var h jws.StandardHeaders
|
|
for k, v := range values {
|
|
err := h.Set(k, v)
|
|
if err == nil {
|
|
t.Fatalf("Setting %s value should have failed", k)
|
|
}
|
|
}
|
|
for k := range values {
|
|
_, ok := h.Get(k)
|
|
if ok {
|
|
t.Fatalf("Getting %s value should have failed", k)
|
|
}
|
|
}
|
|
})
|
|
t.Run("Unknown alg", func(t *testing.T) {
|
|
|
|
headers := `{"typ":"JWT",` + "\r\n" + ` "alg":"dummy"}`
|
|
var standardHeaders jws.StandardHeaders
|
|
err := json.Unmarshal([]byte(headers), &standardHeaders)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if standardHeaders.Algorithm != jwa.Unsupported {
|
|
t.Errorf("expected unsupported algorithm")
|
|
}
|
|
})
|
|
}
|