mirror of
https://github.com/danbulant/jose
synced 2026-05-25 13:01:49 +00:00
357fe0b964
BREAKING CHANGE: Revised, Promise-based API BREAKING CHANGE: No dependencies BREAKING CHANGE: Browser support (using [Web Cryptography API](https://www.w3.org/TR/WebCryptoAPI/)) BREAKING CHANGE: Support for verification using a remote JWKS endpoint BREAKING CHANGE: Experimental Node.js libuv thread pool based runtime (non-blocking 🎉)
520 lines
25 KiB
JavaScript
520 lines
25 KiB
JavaScript
import test from 'ava';
|
||
|
||
const root = !('WEBCRYPTO' in process.env) ? '#dist' : '#dist/webcrypto';
|
||
|
||
Promise.all([
|
||
import(`${root}/jws/flattened/sign`),
|
||
import(`${root}/jws/flattened/verify`),
|
||
import(`${root}/jws/compact/sign`),
|
||
import(`${root}/jws/compact/verify`),
|
||
import(`${root}/jwk/parse`),
|
||
]).then(
|
||
([
|
||
{ default: FlattenedSign },
|
||
{ default: flattenedVerify },
|
||
{ default: CompactSign },
|
||
{ default: compactVerify },
|
||
{ default: parseJwk },
|
||
]) => {
|
||
const flattened = {
|
||
Sign: FlattenedSign,
|
||
verify: flattenedVerify,
|
||
};
|
||
const compact = {
|
||
Sign: CompactSign,
|
||
verify: compactVerify,
|
||
};
|
||
|
||
const encode = TextEncoder.prototype.encode.bind(new TextEncoder());
|
||
|
||
const pubjwk = ({ d, p, q, dp, dq, qi, ...jwk }) => jwk;
|
||
|
||
async function testCookbook(t, vector) {
|
||
const reproducible = !!vector.reproducible;
|
||
|
||
if (reproducible) {
|
||
// sign and compare results are the same
|
||
const runs = [[flattened, vector.output.json_flat]];
|
||
if (
|
||
!vector.signing.protected ||
|
||
!('b64' in vector.signing.protected) ||
|
||
vector.signing.protected.b64 === true
|
||
) {
|
||
runs.push([compact, vector.output.compact]);
|
||
}
|
||
for (const [serialization, expectedResult] of runs) {
|
||
if (!expectedResult) {
|
||
// eslint-disable-next-line no-continue
|
||
continue;
|
||
}
|
||
const sign = new serialization.Sign(encode(vector.input.payload));
|
||
|
||
if (vector.signing.protected) {
|
||
sign.setProtectedHeader(vector.signing.protected);
|
||
}
|
||
|
||
if (vector.signing.unprotected) {
|
||
sign.setUnprotectedHeader(vector.signing.unprotected);
|
||
}
|
||
|
||
const privateKey = await parseJwk(vector.input.key, vector.input.alg);
|
||
|
||
const result = await sign.sign(privateKey);
|
||
|
||
if (typeof result === 'object') {
|
||
Object.entries(expectedResult).forEach(([prop, expected]) => {
|
||
if (
|
||
prop === 'payload' &&
|
||
vector.signing.protected &&
|
||
vector.signing.protected.b64 === false
|
||
)
|
||
return;
|
||
t.is(JSON.stringify(result[prop]), JSON.stringify(expected));
|
||
});
|
||
} else {
|
||
t.is(result, expectedResult);
|
||
}
|
||
}
|
||
} else {
|
||
const sign = new flattened.Sign(encode(vector.input.payload));
|
||
|
||
if (vector.signing.protected) {
|
||
sign.setProtectedHeader(vector.signing.protected);
|
||
}
|
||
|
||
if (vector.signing.unprotected) {
|
||
sign.setUnprotectedHeader(vector.signing.unprotected);
|
||
}
|
||
|
||
const privateKey = await parseJwk(vector.input.key, vector.input.alg);
|
||
const publicKey = await parseJwk(pubjwk(vector.input.key), vector.input.alg);
|
||
|
||
const result = await sign.sign(privateKey);
|
||
await t.notThrowsAsync(flattened.verify(result, publicKey));
|
||
}
|
||
|
||
const publicKey = await parseJwk(pubjwk(vector.input.key), vector.input.alg);
|
||
|
||
if (vector.output.json_flat) {
|
||
await t.notThrowsAsync(flattened.verify(vector.output.json_flat, publicKey));
|
||
}
|
||
if (vector.output.compact) {
|
||
await t.notThrowsAsync(compact.verify(vector.output.compact, publicKey));
|
||
}
|
||
}
|
||
testCookbook.title = (title, vector) => `${vector.title}${title ? ` ${title}` : ''}`;
|
||
|
||
const vectors = [
|
||
{
|
||
title: 'https://tools.ietf.org/html/rfc7520#section-4.1 - RSA v1.5 Signature',
|
||
webcrypto: true,
|
||
reproducible: true,
|
||
input: {
|
||
payload:
|
||
"It’s a dangerous business, Frodo, going out your door. You step onto the road, and if you don't keep your feet, there’s no knowing where you might be swept off to.",
|
||
key: {
|
||
kty: 'RSA',
|
||
ext: false,
|
||
kid: 'bilbo.baggins@hobbiton.example',
|
||
use: 'sig',
|
||
n:
|
||
'n4EPtAOCc9AlkeQHPzHStgAbgs7bTZLwUBZdR8_KuKPEHLd4rHVTeT-O-XV2jRojdNhxJWTDvNd7nqQ0VEiZQHz_AJmSCpMaJMRBSFKrKb2wqVwGU_NsYOYL-QtiWN2lbzcEe6XC0dApr5ydQLrHqkHHig3RBordaZ6Aj-oBHqFEHYpPe7Tpe-OfVfHd1E6cS6M1FZcD1NNLYD5lFHpPI9bTwJlsde3uhGqC0ZCuEHg8lhzwOHrtIQbS0FVbb9k3-tVTU4fg_3L_vniUFAKwuCLqKnS2BYwdq_mzSnbLY7h_qixoR7jig3__kRhuaxwUkRz5iaiQkqgc5gHdrNP5zw',
|
||
e: 'AQAB',
|
||
d:
|
||
'bWUC9B-EFRIo8kpGfh0ZuyGPvMNKvYWNtB_ikiH9k20eT-O1q_I78eiZkpXxXQ0UTEs2LsNRS-8uJbvQ-A1irkwMSMkK1J3XTGgdrhCku9gRldY7sNA_AKZGh-Q661_42rINLRCe8W-nZ34ui_qOfkLnK9QWDDqpaIsA-bMwWWSDFu2MUBYwkHTMEzLYGqOe04noqeq1hExBTHBOBdkMXiuFhUq1BU6l-DqEiWxqg82sXt2h-LMnT3046AOYJoRioz75tSUQfGCshWTBnP5uDjd18kKhyv07lhfSJdrPdM5Plyl21hsFf4L_mHCuoFau7gdsPfHPxxjVOcOpBrQzwQ',
|
||
p:
|
||
'3Slxg_DwTXJcb6095RoXygQCAZ5RnAvZlno1yhHtnUex_fp7AZ_9nRaO7HX_-SFfGQeutao2TDjDAWU4Vupk8rw9JR0AzZ0N2fvuIAmr_WCsmGpeNqQnev1T7IyEsnh8UMt-n5CafhkikzhEsrmndH6LxOrvRJlsPp6Zv8bUq0k',
|
||
q:
|
||
'uKE2dh-cTf6ERF4k4e_jy78GfPYUIaUyoSSJuBzp3Cubk3OCqs6grT8bR_cu0Dm1MZwWmtdqDyI95HrUeq3MP15vMMON8lHTeZu2lmKvwqW7anV5UzhM1iZ7z4yMkuUwFWoBvyY898EXvRD-hdqRxHlSqAZ192zB3pVFJ0s7pFc',
|
||
dp:
|
||
'B8PVvXkvJrj2L-GYQ7v3y9r6Kw5g9SahXBwsWUzp19TVlgI-YV85q1NIb1rxQtD-IsXXR3-TanevuRPRt5OBOdiMGQp8pbt26gljYfKU_E9xn-RULHz0-ed9E9gXLKD4VGngpz-PfQ_q29pk5xWHoJp009Qf1HvChixRX59ehik',
|
||
dq:
|
||
'CLDmDGduhylc9o7r84rEUVn7pzQ6PF83Y-iBZx5NT-TpnOZKF1pErAMVeKzFEl41DlHHqqBLSM0W1sOFbwTxYWZDm6sI6og5iTbwQGIC3gnJKbi_7k_vJgGHwHxgPaX2PnvP-zyEkDERuf-ry4c_Z11Cq9AqC2yeL6kdKT1cYF8',
|
||
qi:
|
||
'3PiqvXQN0zwMeE-sBvZgi289XP9XCQF3VWqPzMKnIgQp7_Tugo6-NZBKCQsMf3HaEGBjTVJs_jcK8-TRXvaKe-7ZMaQj8VfBdYkssbu0NKDDhjJ-GtiseaDVWt7dcH0cfwxgFUHpQh7FoCrjFJ6h6ZEpMF6xmujs4qMpPz8aaI4',
|
||
},
|
||
alg: 'RS256',
|
||
},
|
||
signing: {
|
||
protected: {
|
||
alg: 'RS256',
|
||
kid: 'bilbo.baggins@hobbiton.example',
|
||
},
|
||
},
|
||
output: {
|
||
compact:
|
||
'eyJhbGciOiJSUzI1NiIsImtpZCI6ImJpbGJvLmJhZ2dpbnNAaG9iYml0b24uZXhhbXBsZSJ9.SXTigJlzIGEgZGFuZ2Vyb3VzIGJ1c2luZXNzLCBGcm9kbywgZ29pbmcgb3V0IHlvdXIgZG9vci4gWW91IHN0ZXAgb250byB0aGUgcm9hZCwgYW5kIGlmIHlvdSBkb24ndCBrZWVwIHlvdXIgZmVldCwgdGhlcmXigJlzIG5vIGtub3dpbmcgd2hlcmUgeW91IG1pZ2h0IGJlIHN3ZXB0IG9mZiB0by4.MRjdkly7_-oTPTS3AXP41iQIGKa80A0ZmTuV5MEaHoxnW2e5CZ5NlKtainoFmKZopdHM1O2U4mwzJdQx996ivp83xuglII7PNDi84wnB-BDkoBwA78185hX-Es4JIwmDLJK3lfWRa-XtL0RnltuYv746iYTh_qHRD68BNt1uSNCrUCTJDt5aAE6x8wW1Kt9eRo4QPocSadnHXFxnt8Is9UzpERV0ePPQdLuW3IS_de3xyIrDaLGdjluPxUAhb6L2aXic1U12podGU0KLUQSE_oI-ZnmKJ3F4uOZDnd6QZWJushZ41Axf_fcIe8u9ipH84ogoree7vjbU5y18kDquDg',
|
||
json: {
|
||
payload:
|
||
'SXTigJlzIGEgZGFuZ2Vyb3VzIGJ1c2luZXNzLCBGcm9kbywgZ29pbmcgb3V0IHlvdXIgZG9vci4gWW91IHN0ZXAgb250byB0aGUgcm9hZCwgYW5kIGlmIHlvdSBkb24ndCBrZWVwIHlvdXIgZmVldCwgdGhlcmXigJlzIG5vIGtub3dpbmcgd2hlcmUgeW91IG1pZ2h0IGJlIHN3ZXB0IG9mZiB0by4',
|
||
signatures: [
|
||
{
|
||
protected:
|
||
'eyJhbGciOiJSUzI1NiIsImtpZCI6ImJpbGJvLmJhZ2dpbnNAaG9iYml0b24uZXhhbXBsZSJ9',
|
||
signature:
|
||
'MRjdkly7_-oTPTS3AXP41iQIGKa80A0ZmTuV5MEaHoxnW2e5CZ5NlKtainoFmKZopdHM1O2U4mwzJdQx996ivp83xuglII7PNDi84wnB-BDkoBwA78185hX-Es4JIwmDLJK3lfWRa-XtL0RnltuYv746iYTh_qHRD68BNt1uSNCrUCTJDt5aAE6x8wW1Kt9eRo4QPocSadnHXFxnt8Is9UzpERV0ePPQdLuW3IS_de3xyIrDaLGdjluPxUAhb6L2aXic1U12podGU0KLUQSE_oI-ZnmKJ3F4uOZDnd6QZWJushZ41Axf_fcIe8u9ipH84ogoree7vjbU5y18kDquDg',
|
||
},
|
||
],
|
||
},
|
||
json_flat: {
|
||
payload:
|
||
'SXTigJlzIGEgZGFuZ2Vyb3VzIGJ1c2luZXNzLCBGcm9kbywgZ29pbmcgb3V0IHlvdXIgZG9vci4gWW91IHN0ZXAgb250byB0aGUgcm9hZCwgYW5kIGlmIHlvdSBkb24ndCBrZWVwIHlvdXIgZmVldCwgdGhlcmXigJlzIG5vIGtub3dpbmcgd2hlcmUgeW91IG1pZ2h0IGJlIHN3ZXB0IG9mZiB0by4',
|
||
protected: 'eyJhbGciOiJSUzI1NiIsImtpZCI6ImJpbGJvLmJhZ2dpbnNAaG9iYml0b24uZXhhbXBsZSJ9',
|
||
signature:
|
||
'MRjdkly7_-oTPTS3AXP41iQIGKa80A0ZmTuV5MEaHoxnW2e5CZ5NlKtainoFmKZopdHM1O2U4mwzJdQx996ivp83xuglII7PNDi84wnB-BDkoBwA78185hX-Es4JIwmDLJK3lfWRa-XtL0RnltuYv746iYTh_qHRD68BNt1uSNCrUCTJDt5aAE6x8wW1Kt9eRo4QPocSadnHXFxnt8Is9UzpERV0ePPQdLuW3IS_de3xyIrDaLGdjluPxUAhb6L2aXic1U12podGU0KLUQSE_oI-ZnmKJ3F4uOZDnd6QZWJushZ41Axf_fcIe8u9ipH84ogoree7vjbU5y18kDquDg',
|
||
},
|
||
},
|
||
},
|
||
{
|
||
title: 'https://tools.ietf.org/html/rfc8037#appendix-A.4 - Ed25519 Signing',
|
||
webcrypto: false,
|
||
reproducible: true,
|
||
input: {
|
||
payload: 'Example of Ed25519 signing',
|
||
key: {
|
||
kty: 'OKP',
|
||
ext: false,
|
||
crv: 'Ed25519',
|
||
d: 'nWGxne_9WmC6hEr0kuwsxERJxWl7MmkZcDusAxyuf2A',
|
||
x: '11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo',
|
||
},
|
||
alg: 'EdDSA',
|
||
},
|
||
signing: {
|
||
protected: {
|
||
alg: 'EdDSA',
|
||
},
|
||
},
|
||
output: {
|
||
compact:
|
||
'eyJhbGciOiJFZERTQSJ9.RXhhbXBsZSBvZiBFZDI1NTE5IHNpZ25pbmc.hgyY0il_MGCjP0JzlnLWG1PPOt7-09PGcvMg3AIbQR6dWbhijcNR4ki4iylGjg5BhVsPt9g7sVvpAr_MuM0KAg',
|
||
json: {
|
||
payload: 'RXhhbXBsZSBvZiBFZDI1NTE5IHNpZ25pbmc',
|
||
signatures: [
|
||
{
|
||
protected: 'eyJhbGciOiJFZERTQSJ9',
|
||
signature:
|
||
'hgyY0il_MGCjP0JzlnLWG1PPOt7-09PGcvMg3AIbQR6dWbhijcNR4ki4iylGjg5BhVsPt9g7sVvpAr_MuM0KAg',
|
||
},
|
||
],
|
||
},
|
||
json_flat: {
|
||
payload: 'RXhhbXBsZSBvZiBFZDI1NTE5IHNpZ25pbmc',
|
||
protected: 'eyJhbGciOiJFZERTQSJ9',
|
||
signature:
|
||
'hgyY0il_MGCjP0JzlnLWG1PPOt7-09PGcvMg3AIbQR6dWbhijcNR4ki4iylGjg5BhVsPt9g7sVvpAr_MuM0KAg',
|
||
},
|
||
},
|
||
},
|
||
{
|
||
title: 'https://tools.ietf.org/html/rfc7520#section-4.2 - RSA-PSS Signature',
|
||
webcrypto: true,
|
||
input: {
|
||
payload:
|
||
"It’s a dangerous business, Frodo, going out your door. You step onto the road, and if you don't keep your feet, there’s no knowing where you might be swept off to.",
|
||
key: {
|
||
kty: 'RSA',
|
||
ext: false,
|
||
kid: 'bilbo.baggins@hobbiton.example',
|
||
use: 'sig',
|
||
n:
|
||
'n4EPtAOCc9AlkeQHPzHStgAbgs7bTZLwUBZdR8_KuKPEHLd4rHVTeT-O-XV2jRojdNhxJWTDvNd7nqQ0VEiZQHz_AJmSCpMaJMRBSFKrKb2wqVwGU_NsYOYL-QtiWN2lbzcEe6XC0dApr5ydQLrHqkHHig3RBordaZ6Aj-oBHqFEHYpPe7Tpe-OfVfHd1E6cS6M1FZcD1NNLYD5lFHpPI9bTwJlsde3uhGqC0ZCuEHg8lhzwOHrtIQbS0FVbb9k3-tVTU4fg_3L_vniUFAKwuCLqKnS2BYwdq_mzSnbLY7h_qixoR7jig3__kRhuaxwUkRz5iaiQkqgc5gHdrNP5zw',
|
||
e: 'AQAB',
|
||
d:
|
||
'bWUC9B-EFRIo8kpGfh0ZuyGPvMNKvYWNtB_ikiH9k20eT-O1q_I78eiZkpXxXQ0UTEs2LsNRS-8uJbvQ-A1irkwMSMkK1J3XTGgdrhCku9gRldY7sNA_AKZGh-Q661_42rINLRCe8W-nZ34ui_qOfkLnK9QWDDqpaIsA-bMwWWSDFu2MUBYwkHTMEzLYGqOe04noqeq1hExBTHBOBdkMXiuFhUq1BU6l-DqEiWxqg82sXt2h-LMnT3046AOYJoRioz75tSUQfGCshWTBnP5uDjd18kKhyv07lhfSJdrPdM5Plyl21hsFf4L_mHCuoFau7gdsPfHPxxjVOcOpBrQzwQ',
|
||
p:
|
||
'3Slxg_DwTXJcb6095RoXygQCAZ5RnAvZlno1yhHtnUex_fp7AZ_9nRaO7HX_-SFfGQeutao2TDjDAWU4Vupk8rw9JR0AzZ0N2fvuIAmr_WCsmGpeNqQnev1T7IyEsnh8UMt-n5CafhkikzhEsrmndH6LxOrvRJlsPp6Zv8bUq0k',
|
||
q:
|
||
'uKE2dh-cTf6ERF4k4e_jy78GfPYUIaUyoSSJuBzp3Cubk3OCqs6grT8bR_cu0Dm1MZwWmtdqDyI95HrUeq3MP15vMMON8lHTeZu2lmKvwqW7anV5UzhM1iZ7z4yMkuUwFWoBvyY898EXvRD-hdqRxHlSqAZ192zB3pVFJ0s7pFc',
|
||
dp:
|
||
'B8PVvXkvJrj2L-GYQ7v3y9r6Kw5g9SahXBwsWUzp19TVlgI-YV85q1NIb1rxQtD-IsXXR3-TanevuRPRt5OBOdiMGQp8pbt26gljYfKU_E9xn-RULHz0-ed9E9gXLKD4VGngpz-PfQ_q29pk5xWHoJp009Qf1HvChixRX59ehik',
|
||
dq:
|
||
'CLDmDGduhylc9o7r84rEUVn7pzQ6PF83Y-iBZx5NT-TpnOZKF1pErAMVeKzFEl41DlHHqqBLSM0W1sOFbwTxYWZDm6sI6og5iTbwQGIC3gnJKbi_7k_vJgGHwHxgPaX2PnvP-zyEkDERuf-ry4c_Z11Cq9AqC2yeL6kdKT1cYF8',
|
||
qi:
|
||
'3PiqvXQN0zwMeE-sBvZgi289XP9XCQF3VWqPzMKnIgQp7_Tugo6-NZBKCQsMf3HaEGBjTVJs_jcK8-TRXvaKe-7ZMaQj8VfBdYkssbu0NKDDhjJ-GtiseaDVWt7dcH0cfwxgFUHpQh7FoCrjFJ6h6ZEpMF6xmujs4qMpPz8aaI4',
|
||
},
|
||
alg: 'PS384',
|
||
},
|
||
signing: {
|
||
protected: {
|
||
alg: 'PS384',
|
||
kid: 'bilbo.baggins@hobbiton.example',
|
||
},
|
||
},
|
||
output: {
|
||
compact:
|
||
'eyJhbGciOiJQUzM4NCIsImtpZCI6ImJpbGJvLmJhZ2dpbnNAaG9iYml0b24uZXhhbXBsZSJ9.SXTigJlzIGEgZGFuZ2Vyb3VzIGJ1c2luZXNzLCBGcm9kbywgZ29pbmcgb3V0IHlvdXIgZG9vci4gWW91IHN0ZXAgb250byB0aGUgcm9hZCwgYW5kIGlmIHlvdSBkb24ndCBrZWVwIHlvdXIgZmVldCwgdGhlcmXigJlzIG5vIGtub3dpbmcgd2hlcmUgeW91IG1pZ2h0IGJlIHN3ZXB0IG9mZiB0by4.cu22eBqkYDKgIlTpzDXGvaFfz6WGoz7fUDcfT0kkOy42miAh2qyBzk1xEsnk2IpN6-tPid6VrklHkqsGqDqHCdP6O8TTB5dDDItllVo6_1OLPpcbUrhiUSMxbbXUvdvWXzg-UD8biiReQFlfz28zGWVsdiNAUf8ZnyPEgVFn442ZdNqiVJRmBqrYRXe8P_ijQ7p8Vdz0TTrxUeT3lm8d9shnr2lfJT8ImUjvAA2Xez2Mlp8cBE5awDzT0qI0n6uiP1aCN_2_jLAeQTlqRHtfa64QQSUmFAAjVKPbByi7xho0uTOcbH510a6GYmJUAfmWjwZ6oD4ifKo8DYM-X72Eaw',
|
||
json: {
|
||
payload:
|
||
'SXTigJlzIGEgZGFuZ2Vyb3VzIGJ1c2luZXNzLCBGcm9kbywgZ29pbmcgb3V0IHlvdXIgZG9vci4gWW91IHN0ZXAgb250byB0aGUgcm9hZCwgYW5kIGlmIHlvdSBkb24ndCBrZWVwIHlvdXIgZmVldCwgdGhlcmXigJlzIG5vIGtub3dpbmcgd2hlcmUgeW91IG1pZ2h0IGJlIHN3ZXB0IG9mZiB0by4',
|
||
signatures: [
|
||
{
|
||
protected:
|
||
'eyJhbGciOiJQUzM4NCIsImtpZCI6ImJpbGJvLmJhZ2dpbnNAaG9iYml0b24uZXhhbXBsZSJ9',
|
||
signature:
|
||
'cu22eBqkYDKgIlTpzDXGvaFfz6WGoz7fUDcfT0kkOy42miAh2qyBzk1xEsnk2IpN6-tPid6VrklHkqsGqDqHCdP6O8TTB5dDDItllVo6_1OLPpcbUrhiUSMxbbXUvdvWXzg-UD8biiReQFlfz28zGWVsdiNAUf8ZnyPEgVFn442ZdNqiVJRmBqrYRXe8P_ijQ7p8Vdz0TTrxUeT3lm8d9shnr2lfJT8ImUjvAA2Xez2Mlp8cBE5awDzT0qI0n6uiP1aCN_2_jLAeQTlqRHtfa64QQSUmFAAjVKPbByi7xho0uTOcbH510a6GYmJUAfmWjwZ6oD4ifKo8DYM-X72Eaw',
|
||
},
|
||
],
|
||
},
|
||
json_flat: {
|
||
payload:
|
||
'SXTigJlzIGEgZGFuZ2Vyb3VzIGJ1c2luZXNzLCBGcm9kbywgZ29pbmcgb3V0IHlvdXIgZG9vci4gWW91IHN0ZXAgb250byB0aGUgcm9hZCwgYW5kIGlmIHlvdSBkb24ndCBrZWVwIHlvdXIgZmVldCwgdGhlcmXigJlzIG5vIGtub3dpbmcgd2hlcmUgeW91IG1pZ2h0IGJlIHN3ZXB0IG9mZiB0by4',
|
||
protected: 'eyJhbGciOiJQUzM4NCIsImtpZCI6ImJpbGJvLmJhZ2dpbnNAaG9iYml0b24uZXhhbXBsZSJ9',
|
||
signature:
|
||
'cu22eBqkYDKgIlTpzDXGvaFfz6WGoz7fUDcfT0kkOy42miAh2qyBzk1xEsnk2IpN6-tPid6VrklHkqsGqDqHCdP6O8TTB5dDDItllVo6_1OLPpcbUrhiUSMxbbXUvdvWXzg-UD8biiReQFlfz28zGWVsdiNAUf8ZnyPEgVFn442ZdNqiVJRmBqrYRXe8P_ijQ7p8Vdz0TTrxUeT3lm8d9shnr2lfJT8ImUjvAA2Xez2Mlp8cBE5awDzT0qI0n6uiP1aCN_2_jLAeQTlqRHtfa64QQSUmFAAjVKPbByi7xho0uTOcbH510a6GYmJUAfmWjwZ6oD4ifKo8DYM-X72Eaw',
|
||
},
|
||
},
|
||
},
|
||
{
|
||
title: 'https://tools.ietf.org/html/rfc7520#section-4.3 - ECDSA Signature',
|
||
webcrypto: true,
|
||
input: {
|
||
payload:
|
||
"It’s a dangerous business, Frodo, going out your door. You step onto the road, and if you don't keep your feet, there’s no knowing where you might be swept off to.",
|
||
key: {
|
||
kty: 'EC',
|
||
ext: false,
|
||
kid: 'bilbo.baggins@hobbiton.example',
|
||
use: 'sig',
|
||
crv: 'P-521',
|
||
x:
|
||
'AHKZLLOsCOzz5cY97ewNUajB957y-C-U88c3v13nmGZx6sYl_oJXu9A5RkTKqjqvjyekWF-7ytDyRXYgCF5cj0Kt',
|
||
y:
|
||
'AdymlHvOiLxXkEhayXQnNCvDX4h9htZaCJN34kfmC6pV5OhQHiraVySsUdaQkAgDPrwQrJmbnX9cwlGfP-HqHZR1',
|
||
d:
|
||
'AAhRON2r9cqXX1hg-RoI6R1tX5p2rUAYdmpHZoC1XNM56KtscrX6zbKipQrCW9CGZH3T4ubpnoTKLDYJ_fF3_rJt',
|
||
},
|
||
alg: 'ES512',
|
||
},
|
||
signing: {
|
||
protected: {
|
||
alg: 'ES512',
|
||
kid: 'bilbo.baggins@hobbiton.example',
|
||
},
|
||
},
|
||
output: {
|
||
compact:
|
||
'eyJhbGciOiJFUzUxMiIsImtpZCI6ImJpbGJvLmJhZ2dpbnNAaG9iYml0b24uZXhhbXBsZSJ9.SXTigJlzIGEgZGFuZ2Vyb3VzIGJ1c2luZXNzLCBGcm9kbywgZ29pbmcgb3V0IHlvdXIgZG9vci4gWW91IHN0ZXAgb250byB0aGUgcm9hZCwgYW5kIGlmIHlvdSBkb24ndCBrZWVwIHlvdXIgZmVldCwgdGhlcmXigJlzIG5vIGtub3dpbmcgd2hlcmUgeW91IG1pZ2h0IGJlIHN3ZXB0IG9mZiB0by4.AE_R_YZCChjn4791jSQCrdPZCNYqHXCTZH0-JZGYNlaAjP2kqaluUIIUnC9qvbu9Plon7KRTzoNEuT4Va2cmL1eJAQy3mtPBu_u_sDDyYjnAMDxXPn7XrT0lw-kvAD890jl8e2puQens_IEKBpHABlsbEPX6sFY8OcGDqoRuBomu9xQ2',
|
||
json: {
|
||
payload:
|
||
'SXTigJlzIGEgZGFuZ2Vyb3VzIGJ1c2luZXNzLCBGcm9kbywgZ29pbmcgb3V0IHlvdXIgZG9vci4gWW91IHN0ZXAgb250byB0aGUgcm9hZCwgYW5kIGlmIHlvdSBkb24ndCBrZWVwIHlvdXIgZmVldCwgdGhlcmXigJlzIG5vIGtub3dpbmcgd2hlcmUgeW91IG1pZ2h0IGJlIHN3ZXB0IG9mZiB0by4',
|
||
signatures: [
|
||
{
|
||
protected:
|
||
'eyJhbGciOiJFUzUxMiIsImtpZCI6ImJpbGJvLmJhZ2dpbnNAaG9iYml0b24uZXhhbXBsZSJ9',
|
||
signature:
|
||
'AE_R_YZCChjn4791jSQCrdPZCNYqHXCTZH0-JZGYNlaAjP2kqaluUIIUnC9qvbu9Plon7KRTzoNEuT4Va2cmL1eJAQy3mtPBu_u_sDDyYjnAMDxXPn7XrT0lw-kvAD890jl8e2puQens_IEKBpHABlsbEPX6sFY8OcGDqoRuBomu9xQ2',
|
||
},
|
||
],
|
||
},
|
||
json_flat: {
|
||
payload:
|
||
'SXTigJlzIGEgZGFuZ2Vyb3VzIGJ1c2luZXNzLCBGcm9kbywgZ29pbmcgb3V0IHlvdXIgZG9vci4gWW91IHN0ZXAgb250byB0aGUgcm9hZCwgYW5kIGlmIHlvdSBkb24ndCBrZWVwIHlvdXIgZmVldCwgdGhlcmXigJlzIG5vIGtub3dpbmcgd2hlcmUgeW91IG1pZ2h0IGJlIHN3ZXB0IG9mZiB0by4',
|
||
protected: 'eyJhbGciOiJFUzUxMiIsImtpZCI6ImJpbGJvLmJhZ2dpbnNAaG9iYml0b24uZXhhbXBsZSJ9',
|
||
signature:
|
||
'AE_R_YZCChjn4791jSQCrdPZCNYqHXCTZH0-JZGYNlaAjP2kqaluUIIUnC9qvbu9Plon7KRTzoNEuT4Va2cmL1eJAQy3mtPBu_u_sDDyYjnAMDxXPn7XrT0lw-kvAD890jl8e2puQens_IEKBpHABlsbEPX6sFY8OcGDqoRuBomu9xQ2',
|
||
},
|
||
},
|
||
},
|
||
{
|
||
title: 'https://tools.ietf.org/html/rfc7520#section-4.4 - HMAC-SHA2 Integrity Protection',
|
||
webcrypto: true,
|
||
reproducible: true,
|
||
input: {
|
||
payload:
|
||
"It’s a dangerous business, Frodo, going out your door. You step onto the road, and if you don't keep your feet, there’s no knowing where you might be swept off to.",
|
||
key: {
|
||
kty: 'oct',
|
||
ext: false,
|
||
kid: '018c0ae5-4d9b-471b-bfd6-eef314bc7037',
|
||
use: 'sig',
|
||
alg: 'HS256',
|
||
k: 'hJtXIZ2uSN5kbQfbtTNWbpdmhkV8FJG-Onbc6mxCcYg',
|
||
},
|
||
alg: 'HS256',
|
||
},
|
||
signing: {
|
||
protected: {
|
||
alg: 'HS256',
|
||
kid: '018c0ae5-4d9b-471b-bfd6-eef314bc7037',
|
||
},
|
||
},
|
||
output: {
|
||
compact:
|
||
'eyJhbGciOiJIUzI1NiIsImtpZCI6IjAxOGMwYWU1LTRkOWItNDcxYi1iZmQ2LWVlZjMxNGJjNzAzNyJ9.SXTigJlzIGEgZGFuZ2Vyb3VzIGJ1c2luZXNzLCBGcm9kbywgZ29pbmcgb3V0IHlvdXIgZG9vci4gWW91IHN0ZXAgb250byB0aGUgcm9hZCwgYW5kIGlmIHlvdSBkb24ndCBrZWVwIHlvdXIgZmVldCwgdGhlcmXigJlzIG5vIGtub3dpbmcgd2hlcmUgeW91IG1pZ2h0IGJlIHN3ZXB0IG9mZiB0by4.s0h6KThzkfBBBkLspW1h84VsJZFTsPPqMDA7g1Md7p0',
|
||
json: {
|
||
payload:
|
||
'SXTigJlzIGEgZGFuZ2Vyb3VzIGJ1c2luZXNzLCBGcm9kbywgZ29pbmcgb3V0IHlvdXIgZG9vci4gWW91IHN0ZXAgb250byB0aGUgcm9hZCwgYW5kIGlmIHlvdSBkb24ndCBrZWVwIHlvdXIgZmVldCwgdGhlcmXigJlzIG5vIGtub3dpbmcgd2hlcmUgeW91IG1pZ2h0IGJlIHN3ZXB0IG9mZiB0by4',
|
||
signatures: [
|
||
{
|
||
protected:
|
||
'eyJhbGciOiJIUzI1NiIsImtpZCI6IjAxOGMwYWU1LTRkOWItNDcxYi1iZmQ2LWVlZjMxNGJjNzAzNyJ9',
|
||
signature: 's0h6KThzkfBBBkLspW1h84VsJZFTsPPqMDA7g1Md7p0',
|
||
},
|
||
],
|
||
},
|
||
json_flat: {
|
||
payload:
|
||
'SXTigJlzIGEgZGFuZ2Vyb3VzIGJ1c2luZXNzLCBGcm9kbywgZ29pbmcgb3V0IHlvdXIgZG9vci4gWW91IHN0ZXAgb250byB0aGUgcm9hZCwgYW5kIGlmIHlvdSBkb24ndCBrZWVwIHlvdXIgZmVldCwgdGhlcmXigJlzIG5vIGtub3dpbmcgd2hlcmUgeW91IG1pZ2h0IGJlIHN3ZXB0IG9mZiB0by4',
|
||
protected:
|
||
'eyJhbGciOiJIUzI1NiIsImtpZCI6IjAxOGMwYWU1LTRkOWItNDcxYi1iZmQ2LWVlZjMxNGJjNzAzNyJ9',
|
||
signature: 's0h6KThzkfBBBkLspW1h84VsJZFTsPPqMDA7g1Md7p0',
|
||
},
|
||
},
|
||
},
|
||
{
|
||
title:
|
||
'https://tools.ietf.org/html/rfc7520#section-4.6 - Protecting Specific Header Fields',
|
||
reproducible: true,
|
||
input: {
|
||
payload:
|
||
"It’s a dangerous business, Frodo, going out your door. You step onto the road, and if you don't keep your feet, there’s no knowing where you might be swept off to.",
|
||
key: {
|
||
kty: 'oct',
|
||
ext: false,
|
||
kid: '018c0ae5-4d9b-471b-bfd6-eef314bc7037',
|
||
use: 'sig',
|
||
alg: 'HS256',
|
||
k: 'hJtXIZ2uSN5kbQfbtTNWbpdmhkV8FJG-Onbc6mxCcYg',
|
||
},
|
||
alg: 'HS256',
|
||
},
|
||
signing: {
|
||
protected: {
|
||
alg: 'HS256',
|
||
},
|
||
unprotected: {
|
||
kid: '018c0ae5-4d9b-471b-bfd6-eef314bc7037',
|
||
},
|
||
},
|
||
output: {
|
||
json: {
|
||
payload:
|
||
'SXTigJlzIGEgZGFuZ2Vyb3VzIGJ1c2luZXNzLCBGcm9kbywgZ29pbmcgb3V0IHlvdXIgZG9vci4gWW91IHN0ZXAgb250byB0aGUgcm9hZCwgYW5kIGlmIHlvdSBkb24ndCBrZWVwIHlvdXIgZmVldCwgdGhlcmXigJlzIG5vIGtub3dpbmcgd2hlcmUgeW91IG1pZ2h0IGJlIHN3ZXB0IG9mZiB0by4',
|
||
signatures: [
|
||
{
|
||
protected: 'eyJhbGciOiJIUzI1NiJ9',
|
||
header: {
|
||
kid: '018c0ae5-4d9b-471b-bfd6-eef314bc7037',
|
||
},
|
||
signature: 'bWUSVaxorn7bEF1djytBd0kHv70Ly5pvbomzMWSOr20',
|
||
},
|
||
],
|
||
},
|
||
json_flat: {
|
||
payload:
|
||
'SXTigJlzIGEgZGFuZ2Vyb3VzIGJ1c2luZXNzLCBGcm9kbywgZ29pbmcgb3V0IHlvdXIgZG9vci4gWW91IHN0ZXAgb250byB0aGUgcm9hZCwgYW5kIGlmIHlvdSBkb24ndCBrZWVwIHlvdXIgZmVldCwgdGhlcmXigJlzIG5vIGtub3dpbmcgd2hlcmUgeW91IG1pZ2h0IGJlIHN3ZXB0IG9mZiB0by4',
|
||
protected: 'eyJhbGciOiJIUzI1NiJ9',
|
||
header: {
|
||
kid: '018c0ae5-4d9b-471b-bfd6-eef314bc7037',
|
||
},
|
||
signature: 'bWUSVaxorn7bEF1djytBd0kHv70Ly5pvbomzMWSOr20',
|
||
},
|
||
},
|
||
},
|
||
{
|
||
title: 'https://tools.ietf.org/html/rfc7520#section-4.7 - Protecting Content Only',
|
||
webcrypto: true,
|
||
reproducible: true,
|
||
input: {
|
||
payload:
|
||
"It’s a dangerous business, Frodo, going out your door. You step onto the road, and if you don't keep your feet, there’s no knowing where you might be swept off to.",
|
||
key: {
|
||
kty: 'oct',
|
||
ext: false,
|
||
kid: '018c0ae5-4d9b-471b-bfd6-eef314bc7037',
|
||
use: 'sig',
|
||
alg: 'HS256',
|
||
k: 'hJtXIZ2uSN5kbQfbtTNWbpdmhkV8FJG-Onbc6mxCcYg',
|
||
},
|
||
alg: 'HS256',
|
||
},
|
||
signing: {
|
||
unprotected: {
|
||
alg: 'HS256',
|
||
kid: '018c0ae5-4d9b-471b-bfd6-eef314bc7037',
|
||
},
|
||
},
|
||
output: {
|
||
json: {
|
||
payload:
|
||
'SXTigJlzIGEgZGFuZ2Vyb3VzIGJ1c2luZXNzLCBGcm9kbywgZ29pbmcgb3V0IHlvdXIgZG9vci4gWW91IHN0ZXAgb250byB0aGUgcm9hZCwgYW5kIGlmIHlvdSBkb24ndCBrZWVwIHlvdXIgZmVldCwgdGhlcmXigJlzIG5vIGtub3dpbmcgd2hlcmUgeW91IG1pZ2h0IGJlIHN3ZXB0IG9mZiB0by4',
|
||
signatures: [
|
||
{
|
||
header: {
|
||
alg: 'HS256',
|
||
kid: '018c0ae5-4d9b-471b-bfd6-eef314bc7037',
|
||
},
|
||
signature: 'xuLifqLGiblpv9zBpuZczWhNj1gARaLV3UxvxhJxZuk',
|
||
},
|
||
],
|
||
},
|
||
json_flat: {
|
||
payload:
|
||
'SXTigJlzIGEgZGFuZ2Vyb3VzIGJ1c2luZXNzLCBGcm9kbywgZ29pbmcgb3V0IHlvdXIgZG9vci4gWW91IHN0ZXAgb250byB0aGUgcm9hZCwgYW5kIGlmIHlvdSBkb24ndCBrZWVwIHlvdXIgZmVldCwgdGhlcmXigJlzIG5vIGtub3dpbmcgd2hlcmUgeW91IG1pZ2h0IGJlIHN3ZXB0IG9mZiB0by4',
|
||
header: {
|
||
alg: 'HS256',
|
||
kid: '018c0ae5-4d9b-471b-bfd6-eef314bc7037',
|
||
},
|
||
signature: 'xuLifqLGiblpv9zBpuZczWhNj1gARaLV3UxvxhJxZuk',
|
||
},
|
||
},
|
||
},
|
||
{
|
||
title: 'https://tools.ietf.org/html/rfc7797#section-4.1 - { "b64": false } JSON only',
|
||
webcrypto: true,
|
||
reproducible: true,
|
||
input: {
|
||
payload: '$.02',
|
||
key: {
|
||
kty: 'oct',
|
||
ext: false,
|
||
alg: 'HS256',
|
||
k:
|
||
'AyM1SysPpbyDfgZld3umj1qzKObwVMkoqQ-EstJQLr_T-1qS0gZH75aKtMN3Yj0iPS4hcgUuTwjAzZr1Z9CAow',
|
||
},
|
||
alg: 'HS256',
|
||
},
|
||
signing: {
|
||
protected: {
|
||
alg: 'HS256',
|
||
b64: false,
|
||
crit: ['b64'],
|
||
},
|
||
},
|
||
output: {
|
||
json: {
|
||
payload: '$.02',
|
||
signatures: [
|
||
{
|
||
protected: 'eyJhbGciOiJIUzI1NiIsImI2NCI6ZmFsc2UsImNyaXQiOlsiYjY0Il19',
|
||
signature: 'A5dxf2s96_n5FLueVuW1Z_vh161FwXZC4YLPff6dmDY',
|
||
},
|
||
],
|
||
},
|
||
json_flat: {
|
||
payload: '$.02',
|
||
protected: 'eyJhbGciOiJIUzI1NiIsImI2NCI6ZmFsc2UsImNyaXQiOlsiYjY0Il19',
|
||
signature: 'A5dxf2s96_n5FLueVuW1Z_vh161FwXZC4YLPff6dmDY',
|
||
},
|
||
},
|
||
},
|
||
];
|
||
|
||
for (const vector of vectors) {
|
||
let conditional;
|
||
if ('WEBCRYPTO' in process.env && vector.webcrypto === false) {
|
||
conditional = test.failing;
|
||
} else {
|
||
conditional = test;
|
||
}
|
||
if (vector.skip) {
|
||
conditional = test.skip;
|
||
}
|
||
if (vector.only) {
|
||
conditional = test.only;
|
||
}
|
||
conditional(testCookbook, vector);
|
||
}
|
||
},
|
||
);
|