Add simple tests to verify that EdDSA can be set as signature algorithm

smallrye · Jun 1, 2024 · c4b6656 · c4b6656
1 parent 8a4ced7
commit c4b6656
Showing 1 changed file with 77 additions and 0 deletions.
diff --git a/implementation/jwt-build/src/test/java/io/smallrye/jwt/build/JwtSignTest.java b/implementation/jwt-build/src/test/java/io/smallrye/jwt/build/JwtSignTest.java
@@ -67,6 +67,7 @@
 import org.jose4j.jwt.consumer.InvalidJwtSignatureException;
 import org.jose4j.jwt.consumer.JwtConsumer;
 import org.jose4j.jwt.consumer.JwtConsumerBuilder;
+import org.jose4j.jwx.HeaderParameterNames;
 import org.jose4j.jwx.JsonWebStructure;
 import org.jose4j.keys.EdDsaKeyUtil;
 import org.jose4j.keys.EllipticCurves;
@@ -916,6 +917,82 @@ void signClaimsEcKeyFileWithConfiguredAlgorithm() throws Exception {
         assertEquals("custom-value", claims.getClaimValue("customClaim"));
     }
 
+    @Test
+    void signClaimsWithConfiguredEddsaAlgorithm() throws Exception {
+        var alg = "EdDSA";
+        var configSource = getConfigSource();
+        configSource.setSignatureAlgorithm(alg);
+        configSource.setSigningKeyLocation("/edEcPrivateKey.jwk");
+
+        try {
+            var jwt = Jwt.claim("customClaim", "custom-value").sign();
+
+            var keyContent = KeyUtils.readKeyContent("/edEcPublicKey.jwk");
+            var jws = getVerifiedJws(jwt, PublicJsonWebKey.Factory.newPublicJwk(keyContent).getPublicKey());
+            var claims = JwtClaims.parse(jws.getPayload());
+
+            assertEquals(4, claims.getClaimsMap().size());
+            var headers = getJwsHeaders(jwt, 2);
+            checkDefaultClaimsAndHeaders(headers, claims, "EdDSA", 300);
+            assertEquals("custom-value", claims.getClaimValue("customClaim"));
+        } finally {
+            configSource.setSignatureAlgorithm(null);
+            configSource.setSigningKeyLocation("/privateKey.pem");
+        }
+    }
+
+    @Test
+    void signClaimsWithEddsaFromHeader() throws Exception {
+        var alg = "EdDSA";
+        var configSource = getConfigSource();
+        configSource.setSigningKeyLocation("/edEcPrivateKey.jwk");
+
+        try {
+            var jwt = Jwt.claims()
+                    .issuer("https://issuer.com")
+                    .jws()
+                    .header(HeaderParameterNames.ALGORITHM, alg)
+                    .header("customHeader", "custom-header-value")
+                    .sign();
+
+            var keyContent = KeyUtils.readKeyContent("/edEcPublicKey.jwk");
+            var jws = getVerifiedJws(jwt, PublicJsonWebKey.Factory.newPublicJwk(keyContent).getPublicKey());
+            var claims = JwtClaims.parse(jws.getPayload());
+
+            assertEquals(4, claims.getClaimsMap().size());
+            assertEquals("https://issuer.com", claims.getIssuer());
+            assertEquals("custom-header-value", jws.getHeader("customHeader"));
+        } finally {
+            configSource.setSigningKeyLocation("/privateKey.pem");
+        }
+    }
+
+    @Test
+    void signClaimsWithEddsaFromAlgorithm() throws Exception {
+        var alg = SignatureAlgorithm.EDDSA;
+        var configSource = getConfigSource();
+        configSource.setSigningKeyLocation("/edEcPrivateKey.jwk");
+
+        try {
+            var jwt = Jwt.claims()
+                    .issuer("https://issuer.com")
+                    .jws()
+                    .algorithm(alg)
+                    .header("customHeader", "custom-header-value")
+                    .sign();
+
+            var keyContent = KeyUtils.readKeyContent("/edEcPublicKey.jwk");
+            var jws = getVerifiedJws(jwt, PublicJsonWebKey.Factory.newPublicJwk(keyContent).getPublicKey());
+            var claims = JwtClaims.parse(jws.getPayload());
+
+            assertEquals(4, claims.getClaimsMap().size());
+            assertEquals("https://issuer.com", claims.getIssuer());
+            assertEquals("custom-header-value", jws.getHeader("customHeader"));
+        } finally {
+            configSource.setSigningKeyLocation("/privateKey.pem");
+        }
+    }
+
     private static SecretKey createSecretKey() throws Exception {
         String jwkJson = "{\"kty\":\"oct\",\"k\":\"Fdh9u8rINxfivbrianbbVT1u232VQBZYKx1HGAGPt2I\"}";
         JsonWebKey jwk = JsonWebKey.Factory.newJwk(jwkJson);