mirror of
https://github.com/danbulant/jose
synced 2026-05-25 04:51:47 +00:00
84 lines
3.6 KiB
JavaScript
84 lines
3.6 KiB
JavaScript
const test = require('ava')
|
|
|
|
const base64url = require('../../lib/help/base64url')
|
|
const { JWK: { generateSync }, JWE, errors } = require('../..')
|
|
|
|
const UNDEFINED = 'http://example.invalid/UNDEFINED'
|
|
|
|
test('crit must be understood', t => {
|
|
const k = generateSync('oct')
|
|
const jws = JWE.encrypt('foo', k, { crit: [UNDEFINED], [UNDEFINED]: true })
|
|
t.throws(() => {
|
|
JWE.decrypt(jws, k)
|
|
}, { instanceOf: errors.JOSECritNotUnderstood, code: 'ERR_JOSE_CRIT_NOT_UNDERSTOOD', message: `critical "${UNDEFINED}" is not understood` })
|
|
JWE.decrypt(jws, k, { crit: [UNDEFINED] })
|
|
})
|
|
|
|
test('crit must be present', t => {
|
|
const k = generateSync('oct')
|
|
t.throws(() => {
|
|
JWE.encrypt('foo', k, { crit: [UNDEFINED] })
|
|
}, { instanceOf: errors.JWEInvalid, code: 'ERR_JWE_INVALID', message: `critical parameter "${UNDEFINED}" is missing` })
|
|
t.throws(() => {
|
|
JWE.decrypt(
|
|
`${base64url.JSON.encode({ alg: 'HS256', crit: [UNDEFINED] })}.${base64url.JSON.encode({})}...`,
|
|
k,
|
|
{ crit: [UNDEFINED] }
|
|
)
|
|
}, { instanceOf: errors.JWEInvalid, code: 'ERR_JWE_INVALID', message: `critical parameter "${UNDEFINED}" is missing` })
|
|
})
|
|
|
|
test('crit must be integrity protected', t => {
|
|
const k = generateSync('oct')
|
|
t.throws(() => {
|
|
JWE.encrypt.flattened('foo', k, undefined, { crit: [UNDEFINED] })
|
|
}, { instanceOf: errors.JWEInvalid, code: 'ERR_JWE_INVALID', message: '"crit" Header Parameter MUST be integrity protected when present' })
|
|
const jws = JWE.encrypt.flattened('foo', k)
|
|
jws.header = { crit: [UNDEFINED] }
|
|
t.throws(() => {
|
|
JWE.decrypt(jws, k, { crit: [UNDEFINED] })
|
|
}, { instanceOf: errors.JWEInvalid, code: 'ERR_JWE_INVALID', message: '"crit" Header Parameter MUST be integrity protected when present' })
|
|
})
|
|
|
|
test('crit must be an array of strings', t => {
|
|
const k = generateSync('oct')
|
|
;[{}, new Object(), false, null, Infinity, 0, '', Buffer.from('foo'), []].forEach((val) => { // eslint-disable-line no-new-object
|
|
t.throws(() => {
|
|
JWE.encrypt('foo', k, { crit: val })
|
|
}, { instanceOf: errors.JWEInvalid, code: 'ERR_JWE_INVALID', message: '"crit" Header Parameter MUST be an array of non-empty strings when present' })
|
|
t.throws(() => {
|
|
JWE.encrypt('foo', k, { crit: [val] })
|
|
}, { instanceOf: errors.JWEInvalid, code: 'ERR_JWE_INVALID', message: '"crit" Header Parameter MUST be an array of non-empty strings when present' })
|
|
})
|
|
})
|
|
|
|
test('crit option be an array of strings', t => {
|
|
;[{}, new Object(), false, null, Infinity, 0, '', Buffer.from('foo')].forEach((val) => { // eslint-disable-line no-new-object
|
|
t.throws(() => {
|
|
JWE.decrypt({
|
|
header: { alg: 'HS256' },
|
|
payload: 'foo',
|
|
ciphertext: 'bar'
|
|
}, generateSync('oct'), { crit: val })
|
|
}, { instanceOf: TypeError, message: '"crit" option must be an array of non-empty strings' })
|
|
t.throws(() => {
|
|
JWE.decrypt({
|
|
header: { alg: 'HS256' },
|
|
payload: 'foo',
|
|
ciphertext: 'bar'
|
|
}, generateSync('oct'), { crit: [val] })
|
|
}, { instanceOf: TypeError, message: '"crit" option must be an array of non-empty strings' })
|
|
})
|
|
})
|
|
|
|
test('crit must not contain JWE/JWS/JWA defined header parameters', t => {
|
|
const k = generateSync('oct')
|
|
;[
|
|
'alg', 'jku', 'jwk', 'kid', 'x5u', 'x5c', 'x5t', 'x5t#S256', 'typ', 'cty',
|
|
'crit', 'enc', 'zip', 'epk', 'apu', 'apv', 'iv', 'tag', 'p2s', 'p2c'
|
|
].forEach((crit) => {
|
|
t.throws(() => {
|
|
JWE.encrypt('foo', k, { crit: [crit] })
|
|
}, { instanceOf: errors.JWEInvalid, code: 'ERR_JWE_INVALID', message: `The critical list contains a non-extension Header Parameter ${crit}` })
|
|
})
|
|
})
|