pax_global_header00006660000000000000000000000064124746540300014517gustar00rootroot0000000000000052 comment=044e4fd75cd2b524faa24b66476a103cc07b50d2 javaOIDCMsg-java-jwt-2.1.0/000077500000000000000000000000001247465403000152675ustar00rootroot00000000000000javaOIDCMsg-java-jwt-2.1.0/.gitignore000066400000000000000000000045711247465403000172660ustar00rootroot00000000000000# Maven Shaded Jar Artifact dependency-reduced-pom.xml node_modules # Ignore Eclipse stuff .project .settings .classpath # Ignore Java and IntelliJ IDEA stuff .idea target *.iml ## Ignore Visual Studio temporary files, build results, and ## files generated by popular Visual Studio add-ons. packages # User-specific files *.suo *.user *.sln.docstates # Build results [Dd]ebug/ [Rr]elease/ x64/ build/ [Bb]in/ [Oo]bj/ # Enable "build/" folder in the NuGet Packages folder since NuGet packages use it for MSBuild targets !packages/*/build/ # MSTest test Results [Tt]est[Rr]esult*/ [Bb]uild[Ll]og.* *_i.c *_p.c *.ilk *.meta *.obj *.pch *.pdb *.pgc *.pgd *.rsp *.sbr *.tlb *.tli *.tlh *.tmp *.tmp_proj *.log *.vspscc *.vssscc .builds *.pidb *.log *.scc # Visual C++ cache files ipch/ *.aps *.ncb *.opensdf *.sdf *.cachefile # Visual Studio profiler *.psess *.vsp *.vspx # Guidance Automation Toolkit *.gpState # ReSharper is a .NET coding add-in _ReSharper*/ *.[Rr]e[Ss]harper # TeamCity is a build add-in _TeamCity* # DotCover is a Code Coverage Tool *.dotCover # NCrunch *.ncrunch* .*crunch*.local.xml # Installshield output folder [Ee]xpress/ # DocProject is a documentation generator add-in DocProject/buildhelp/ DocProject/Help/*.HxT DocProject/Help/*.HxC DocProject/Help/*.hhc DocProject/Help/*.hhk DocProject/Help/*.hhp DocProject/Help/Html2 DocProject/Help/html # Click-Once directory publish/ # Publish Web Output *.Publish.xml # NuGet Packages Directory ## TODO: If you have NuGet Package Restore enabled, uncomment the next line #packages/ # Windows Azure Build Output csx *.build.csdef # Windows Store app package directory AppPackages/ # Others sql/ *.Cache ClientBin/ [Ss]tyle[Cc]op.* ~$* *~ *.dbmdl *.[Pp]ublish.xml *.pfx *.publishsettings # RIA/Silverlight projects Generated_Code/ # Backup & report files from converting an old project file to a newer # Visual Studio version. Backup files are not needed, because we have git ;-) _UpgradeReport_Files/ Backup*/ UpgradeLog*.XML UpgradeLog*.htm # SQL Server files App_Data/*.mdf App_Data/*.ldf #LightSwitch generated files GeneratedArtifacts/ _Pvt_Extensions/ ModelManifest.xml # ========================= # Windows detritus # ========================= # Windows image file caches Thumbs.db ehthumbs.db # Folder config file Desktop.ini # Recycle Bin used on file shares $RECYCLE.BIN/ # Mac desktop service store files .DS_Store javaOIDCMsg-java-jwt-2.1.0/LICENSE.txt000066400000000000000000000021411247465403000171100ustar00rootroot00000000000000The MIT License (MIT) Copyright (c) 2015 Auth0, Inc. (http://auth0.com) Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. javaOIDCMsg-java-jwt-2.1.0/README.md000066400000000000000000000036111247465403000165470ustar00rootroot00000000000000# Java JWT An implementation of [JSON Web Tokens](http://self-issued.info/docs/draft-ietf-oauth-json-web-token.html) developed against `draft-ietf-oauth-json-web-token-08`. ### Usage ```java public class Application { public static void main (String [] args) { try { Map decodedPayload = new JWTVerifier("secret", "audience").verify("my-token"); // Get custom fields from decoded Payload System.out.println(decodedPayload.get("name")); } catch (SignatureException signatureException) { System.err.println("Invalid signature!"); } catch (IllegalStateException illegalStateException) { System.err.println("Invalid Token! " + illegalStateException); } } } ``` #### Maven coordinates? Yes, here you are: ```xml com.auth0 java-jwt 2.0.1 ``` ### Credits Most of the code have been written by Luis Faja . We just wrapped it in a nicer interface and published it to Maven Central. We'll be adding support for signing and other algorithms in the future. ### Why another JSON Web Token implementation for Java? We think that current JWT implementations are either too complex or not tested enough. We want something simple with the right number of abstractions. ## Issue Reporting If you have found a bug or if you have a feature request, please report them at this repository issues section. Please do not report security vulnerabilities on the public GitHub issue tracker. The [Responsible Disclosure Program](https://auth0.com/whitehat) details the procedure for disclosing security issues. ## Author [Auth0](auth0.com) ## License This project is licensed under the MIT license. See the [LICENSE](LICENSE.txt) file for more info. javaOIDCMsg-java-jwt-2.1.0/pom.xml000066400000000000000000000065221247465403000166110ustar00rootroot00000000000000 4.0.0 org.sonatype.oss oss-parent 9 com.auth0 java-jwt 2.1.0 Java JWT Java implementation of JSON Web Token developed against draft-ietf-oauth-json-web-token-08. http://www.jwt.io 1.5 com.auth0.jwt.internal The MIT License http://www.opensource.org/licenses/mit-license.php repo Alberto Pose pose Developer https://github.com/auth0/java-jwt scm:git:git@github.com:auth0/java-jwt.git scm:git:git@github.com:auth0/java-jwt.git com.fasterxml.jackson.core jackson-databind 2.0.1 commons-codec commons-codec 1.4 junit junit 4.11 test org.apache.maven.plugins maven-compiler-plugin 3.1 ${java.version} ${java.version} UTF-8 org.apache.maven.plugins maven-shade-plugin 2.2 package shade false true com.fasterxml.jackson ${repackage.base}.com.fasterxml.jackson org.apache.commons.codec ${repackage.base}.org.apache.commons.codec javaOIDCMsg-java-jwt-2.1.0/src/000077500000000000000000000000001247465403000160565ustar00rootroot00000000000000javaOIDCMsg-java-jwt-2.1.0/src/main/000077500000000000000000000000001247465403000170025ustar00rootroot00000000000000javaOIDCMsg-java-jwt-2.1.0/src/main/java/000077500000000000000000000000001247465403000177235ustar00rootroot00000000000000javaOIDCMsg-java-jwt-2.1.0/src/main/java/com/000077500000000000000000000000001247465403000205015ustar00rootroot00000000000000javaOIDCMsg-java-jwt-2.1.0/src/main/java/com/auth0/000077500000000000000000000000001247465403000215225ustar00rootroot00000000000000javaOIDCMsg-java-jwt-2.1.0/src/main/java/com/auth0/jwt/000077500000000000000000000000001247465403000223265ustar00rootroot00000000000000javaOIDCMsg-java-jwt-2.1.0/src/main/java/com/auth0/jwt/Algorithm.java000066400000000000000000000004501247465403000251160ustar00rootroot00000000000000package com.auth0.jwt; public enum Algorithm { HS256("HmacSHA256"), HS384("HmacSHA384"), HS512("HmacSHA512"), RS256("RS256"), RS384("RS384"), RS512("RS512"); private Algorithm(String value) { this.value = value; } private String value; public String getValue() { return value; } } javaOIDCMsg-java-jwt-2.1.0/src/main/java/com/auth0/jwt/JWTAudienceException.java000066400000000000000000000015551247465403000271600ustar00rootroot00000000000000package com.auth0.jwt; import com.fasterxml.jackson.databind.JsonNode; import java.util.ArrayList; import java.util.List; public class JWTAudienceException extends JWTVerifyException { private JsonNode audienceNode; public JWTAudienceException(JsonNode audienceNode) { this.audienceNode = audienceNode; } public JWTAudienceException(String message, JsonNode audienceNode) { super(message); this.audienceNode = audienceNode; } public List getAudience() { ArrayList audience = new ArrayList(); if (audienceNode.isArray()) { for (JsonNode jsonNode : audienceNode) { audience.add(jsonNode.textValue()); } } else if (audienceNode.isTextual()) { audience.add(audienceNode.textValue()); } return audience; } } javaOIDCMsg-java-jwt-2.1.0/src/main/java/com/auth0/jwt/JWTExpiredException.java000066400000000000000000000006401247465403000270350ustar00rootroot00000000000000package com.auth0.jwt; public class JWTExpiredException extends JWTVerifyException { private long expiration; public JWTExpiredException(long expiration) { this.expiration = expiration; } public JWTExpiredException(String message, long expiration) { super(message); this.expiration = expiration; } public long getExpiration() { return expiration; }; } javaOIDCMsg-java-jwt-2.1.0/src/main/java/com/auth0/jwt/JWTIssuerException.java000066400000000000000000000006061247465403000267110ustar00rootroot00000000000000package com.auth0.jwt; public class JWTIssuerException extends JWTVerifyException { private final String issuer; public JWTIssuerException(String issuer) { this.issuer = issuer; } public JWTIssuerException(String message, String issuer) { super(message); this.issuer = issuer; } public String getIssuer() { return issuer; } } javaOIDCMsg-java-jwt-2.1.0/src/main/java/com/auth0/jwt/JWTSigner.java000066400000000000000000000262701247465403000250140ustar00rootroot00000000000000package com.auth0.jwt; import java.io.UnsupportedEncodingException; import java.net.URI; import java.net.URISyntaxException; import java.util.ArrayList; import java.util.Collection; import java.util.HashMap; import java.util.Iterator; import java.util.List; import java.util.Map; import java.util.UUID; import javax.crypto.Mac; import javax.crypto.spec.SecretKeySpec; import javax.naming.OperationNotSupportedException; import org.apache.commons.codec.binary.Base64; import com.fasterxml.jackson.databind.ObjectMapper; import com.fasterxml.jackson.databind.node.JsonNodeFactory; import com.fasterxml.jackson.databind.node.ObjectNode; /** * JwtSigner implementation based on the Ruby implementation from http://jwt.io * No support for RSA encryption at present */ public class JWTSigner { private final byte[] secret; public JWTSigner(String secret) { this(secret.getBytes()); } public JWTSigner(byte[] secret) { this.secret = secret; } /** * Generate a JSON Web Token. * using the default algorithm HMAC SHA-256 ("HS256") * and no claims automatically set. * * @param claims A map of the JWT claims that form the payload. Registered claims * must be of appropriate Java datatype as following: *
    *
  • iss, sub: String *
  • exp, nbf, iat, jti: numeric, eg. Long *
  • aud: String, or Collection<String> *
* All claims with a null value are left out the JWT. * Any claims set automatically as specified in * the "options" parameter override claims in this map. * * * @param options Allow choosing the signing algorithm, and automatic setting of some registered claims. */ public String sign(Map claims, Options options) { Algorithm algorithm = Algorithm.HS256; if (options != null && options.algorithm != null) algorithm = options.algorithm; List segments = new ArrayList(); try { segments.add(encodedHeader(algorithm)); segments.add(encodedPayload(claims, options)); segments.add(encodedSignature(join(segments, "."), algorithm)); } catch (Exception e) { throw (e instanceof RuntimeException) ? (RuntimeException) e : new RuntimeException(e); } return join(segments, "."); } /** * Generate a JSON Web Token using the default algorithm HMAC SHA-256 ("HS256") * and no claims automatically set. */ public String sign(Map claims) { return sign(claims, null); } /** * Generate the header part of a JSON web token. */ private String encodedHeader(Algorithm algorithm) throws UnsupportedEncodingException { if (algorithm == null) { // default the algorithm if not specified algorithm = Algorithm.HS256; } // create the header ObjectNode header = JsonNodeFactory.instance.objectNode(); header.put("typ", "JWT"); header.put("alg", algorithm.name()); return base64UrlEncode(header.toString().getBytes("UTF-8")); } /** * Generate the JSON web token payload string from the claims. * @param options */ private String encodedPayload(Map _claims, Options options) throws Exception { Map claims = new HashMap(_claims); enforceStringOrURI(claims, "iss"); enforceStringOrURI(claims, "sub"); enforceStringOrURICollection(claims, "aud"); enforceIntDate(claims, "exp"); enforceIntDate(claims, "nbf"); enforceIntDate(claims, "iat"); enforceString(claims, "jti"); if (options != null) processPayloadOptions(claims, options); String payload = new ObjectMapper().writeValueAsString(claims); return base64UrlEncode(payload.getBytes("UTF-8")); } private void processPayloadOptions(Map claims, Options options) { long now = System.currentTimeMillis() / 1000l; if (options.expirySeconds != null) claims.put("exp", now + options.expirySeconds); if (options.notValidBeforeLeeway != null) claims.put("nbf", now - options.notValidBeforeLeeway); if (options.isIssuedAt()) claims.put("iat", now); if (options.isJwtId()) claims.put("jti", UUID.randomUUID().toString()); } private void enforceIntDate(Map claims, String claimName) { Object value = handleNullValue(claims, claimName); if (value == null) return; if (!(value instanceof Number)) { throw new RuntimeException(String.format("Claim '%s' is invalid: must be an instance of Number", claimName)); } long longValue = ((Number) value).longValue(); if (longValue < 0) throw new RuntimeException(String.format("Claim '%s' is invalid: must be non-negative", claimName)); claims.put(claimName, longValue); } private void enforceStringOrURICollection(Map claims, String claimName) { Object values = handleNullValue(claims, claimName); if (values == null) return; if (values instanceof Collection) { @SuppressWarnings({ "unchecked" }) Iterator iterator = ((Collection) values).iterator(); while (iterator.hasNext()) { Object value = iterator.next(); String error = checkStringOrURI(value); if (error != null) throw new RuntimeException(String.format("Claim 'aud' element is invalid: %s", error)); } } else { enforceStringOrURI(claims, "aud"); } } private void enforceStringOrURI(Map claims, String claimName) { Object value = handleNullValue(claims, claimName); if (value == null) return; String error = checkStringOrURI(value); if (error != null) throw new RuntimeException(String.format("Claim '%s' is invalid: %s", claimName, error)); } private void enforceString(Map claims, String claimName) { Object value = handleNullValue(claims, claimName); if (value == null) return; if (!(value instanceof String)) throw new RuntimeException(String.format("Claim '%s' is invalid: not a string", claimName)); } private Object handleNullValue(Map claims, String claimName) { if (! claims.containsKey(claimName)) return null; Object value = claims.get(claimName); if (value == null) { claims.remove(claimName); return null; } return value; } private String checkStringOrURI(Object value) { if (!(value instanceof String)) return "not a string"; String stringOrUri = (String) value; if (!stringOrUri.contains(":")) return null; try { new URI(stringOrUri); } catch (URISyntaxException e) { return "not a valid URI"; } return null; } /** * Sign the header and payload */ private String encodedSignature(String signingInput, Algorithm algorithm) throws Exception { byte[] signature = sign(algorithm, signingInput, secret); return base64UrlEncode(signature); } /** * Safe URL encode a byte array to a String */ private String base64UrlEncode(byte[] str) { return new String(Base64.encodeBase64URLSafe(str)); } /** * Switch the signing algorithm based on input, RSA not supported */ private static byte[] sign(Algorithm algorithm, String msg, byte[] secret) throws Exception { switch (algorithm) { case HS256: case HS384: case HS512: return signHmac(algorithm, msg, secret); case RS256: case RS384: case RS512: default: throw new OperationNotSupportedException("Unsupported signing method"); } } /** * Sign an input string using HMAC and return the encrypted bytes */ private static byte[] signHmac(Algorithm algorithm, String msg, byte[] secret) throws Exception { Mac mac = Mac.getInstance(algorithm.getValue()); mac.init(new SecretKeySpec(secret, algorithm.getValue())); return mac.doFinal(msg.getBytes()); } private String join(List input, String on) { int size = input.size(); int count = 1; StringBuilder joined = new StringBuilder(); for (String string : input) { joined.append(string); if (count < size) { joined.append(on); } count++; } return joined.toString(); } /** * An option object for JWT signing operation. Allow choosing the algorithm, and/or specifying * claims to be automatically set. */ public static class Options { private Algorithm algorithm; private Integer expirySeconds; private Integer notValidBeforeLeeway; private boolean issuedAt; private boolean jwtId; public Algorithm getAlgorithm() { return algorithm; } /** * Algorithm to sign JWT with. Default is HS256. */ public Options setAlgorithm(Algorithm algorithm) { this.algorithm = algorithm; return this; } public Integer getExpirySeconds() { return expirySeconds; } /** * Set JWT claim "exp" to current timestamp plus this value. * Overrides content of claims in sign(). */ public Options setExpirySeconds(Integer expirySeconds) { this.expirySeconds = expirySeconds; return this; } public Integer getNotValidBeforeLeeway() { return notValidBeforeLeeway; } /** * Set JWT claim "nbf" to current timestamp minus this value. * Overrides content of claims in sign(). */ public Options setNotValidBeforeLeeway(Integer notValidBeforeLeeway) { this.notValidBeforeLeeway = notValidBeforeLeeway; return this; } public boolean isIssuedAt() { return issuedAt; } /** * Set JWT claim "iat" to current timestamp. Defaults to false. * Overrides content of claims in sign(). */ public Options setIssuedAt(boolean issuedAt) { this.issuedAt = issuedAt; return this; } public boolean isJwtId() { return jwtId; } /** * Set JWT claim "jti" to a pseudo random unique value (type 4 UUID). Defaults to false. * Overrides content of claims in sign(). */ public Options setJwtId(boolean jwtId) { this.jwtId = jwtId; return this; } } } javaOIDCMsg-java-jwt-2.1.0/src/main/java/com/auth0/jwt/JWTVerifier.java000066400000000000000000000140341247465403000253330ustar00rootroot00000000000000package com.auth0.jwt; import com.fasterxml.jackson.databind.JsonNode; import com.fasterxml.jackson.databind.ObjectMapper; import org.apache.commons.codec.binary.Base64; import javax.crypto.Mac; import javax.crypto.spec.SecretKeySpec; import java.io.IOException; import java.io.UnsupportedEncodingException; import java.nio.charset.Charset; import java.security.InvalidKeyException; import java.security.MessageDigest; import java.security.NoSuchAlgorithmException; import java.security.SignatureException; import java.util.ArrayList; import java.util.Arrays; import java.util.HashMap; import java.util.Map; /** * JWT Java Implementation * Adapted from https://bitbucket.org/lluisfaja/javajwt/wiki/Home * See JWTVerifier.java */ public class JWTVerifier { private final byte[] secret; private final String audience; private final String issuer; private final Base64 decoder = new Base64(true);; private final ObjectMapper mapper; private Map algorithms; public JWTVerifier(String secret, String audience, String issuer) { this(secret.getBytes(Charset.forName("UTF-8")), audience, issuer); } public JWTVerifier(String secret, String audience) { this(secret, audience, null); } public JWTVerifier(String secret) { this(secret, null, null); } public JWTVerifier(byte[] secret, String audience, String issuer) { if (secret == null || secret.length == 0) { throw new IllegalArgumentException("Secret cannot be null or empty"); } mapper = new ObjectMapper(); algorithms = new HashMap(); algorithms.put("HS256", "HmacSHA256"); algorithms.put("HS384", "HmacSHA384"); algorithms.put("HS512", "HmacSHA512"); this.secret = secret; this.audience = audience; this.issuer = issuer; } public JWTVerifier(byte[] secret, String audience) { this(secret, audience, null); } public JWTVerifier(byte[] secret) { this(secret, null, null); } /** * Performs JWT validation * * @param token token to verify * @throws SignatureException when signature is invalid * @throws JWTVerifyException when expiration, issuer or audience are invalid * @throws IllegalStateException when token's structure is invalid */ public Map verify(String token) throws NoSuchAlgorithmException, InvalidKeyException, IllegalStateException, IOException, SignatureException, JWTVerifyException { if (token == null || "".equals(token)) { throw new IllegalStateException("token not set"); } String[] pieces = token.split("\\."); // check number of segments if (pieces.length != 3) { throw new IllegalStateException("Wrong number of segments: " + pieces.length); } // get JWTHeader JSON object. Extract algorithm JsonNode jwtHeader = decodeAndParse(pieces[0]); String algorithm = getAlgorithm(jwtHeader); // get JWTClaims JSON object JsonNode jwtPayload = decodeAndParse(pieces[1]); // check signature verifySignature(pieces, algorithm); // additional JWTClaims checks verifyExpiration(jwtPayload); verifyIssuer(jwtPayload); verifyAudience(jwtPayload); return mapper.treeToValue(jwtPayload, Map.class); } void verifySignature(String[] pieces, String algorithm) throws NoSuchAlgorithmException, InvalidKeyException, SignatureException { Mac hmac = Mac.getInstance(algorithm); hmac.init(new SecretKeySpec(secret, algorithm)); byte[] sig = hmac.doFinal(new StringBuilder(pieces[0]).append(".").append(pieces[1]).toString().getBytes()); if (!MessageDigest.isEqual(sig, decoder.decodeBase64(pieces[2]))) { throw new SignatureException("signature verification failed"); } } void verifyExpiration(JsonNode jwtClaims) throws JWTExpiredException { final long expiration = jwtClaims.has("exp") ? jwtClaims.get("exp").asLong(0) : 0; if (expiration != 0 && System.currentTimeMillis() / 1000L >= expiration) { throw new JWTExpiredException("jwt expired", expiration); } } void verifyIssuer(JsonNode jwtClaims) throws JWTIssuerException { final String issuerFromToken = jwtClaims.has("iss") ? jwtClaims.get("iss").asText() : null; if (issuerFromToken != null && issuer != null && !issuer.equals(issuerFromToken)) { throw new JWTIssuerException("jwt issuer invalid", issuerFromToken); } } void verifyAudience(JsonNode jwtClaims) throws JWTAudienceException { if (audience == null) return; JsonNode audNode = jwtClaims.get("aud"); if (audNode == null) return; if (audNode.isArray()) { for (JsonNode jsonNode : audNode) { if (audience.equals(jsonNode.textValue())) return; } } else if (audNode.isTextual()) { if (audience.equals(audNode.textValue())) return; } throw new JWTAudienceException("jwt audience invalid", audNode); } String getAlgorithm(JsonNode jwtHeader) { final String algorithmName = jwtHeader.has("alg") ? jwtHeader.get("alg").asText() : null; if (jwtHeader.get("alg") == null) { throw new IllegalStateException("algorithm not set"); } if (algorithms.get(algorithmName) == null) { throw new IllegalStateException("unsupported algorithm"); } return algorithms.get(algorithmName); } JsonNode decodeAndParse(String b64String) throws IOException { String jsonString = new String(decoder.decodeBase64(b64String), "UTF-8"); JsonNode jwtHeader = mapper.readValue(jsonString, JsonNode.class); return jwtHeader; } } javaOIDCMsg-java-jwt-2.1.0/src/main/java/com/auth0/jwt/JWTVerifyException.java000066400000000000000000000005721247465403000267050ustar00rootroot00000000000000package com.auth0.jwt; public class JWTVerifyException extends Exception { /** * */ private static final long serialVersionUID = -4911506451239107610L; public JWTVerifyException() { } public JWTVerifyException(String message, Throwable cause) { super(message, cause); } public JWTVerifyException(String message) { super(message); } } javaOIDCMsg-java-jwt-2.1.0/src/test/000077500000000000000000000000001247465403000170355ustar00rootroot00000000000000javaOIDCMsg-java-jwt-2.1.0/src/test/java/000077500000000000000000000000001247465403000177565ustar00rootroot00000000000000javaOIDCMsg-java-jwt-2.1.0/src/test/java/com/000077500000000000000000000000001247465403000205345ustar00rootroot00000000000000javaOIDCMsg-java-jwt-2.1.0/src/test/java/com/auth0/000077500000000000000000000000001247465403000215555ustar00rootroot00000000000000javaOIDCMsg-java-jwt-2.1.0/src/test/java/com/auth0/jwt/000077500000000000000000000000001247465403000223615ustar00rootroot00000000000000javaOIDCMsg-java-jwt-2.1.0/src/test/java/com/auth0/jwt/JWTSignerTest.java000066400000000000000000000165451247465403000257130ustar00rootroot00000000000000package com.auth0.jwt; import static org.junit.Assert.assertEquals; import java.util.Arrays; import java.util.HashMap; import java.util.LinkedList; import java.util.List; import org.junit.Test; public class JWTSignerTest { private static JWTSigner signer = new JWTSigner("my secret"); @Test public void shouldSignEmpty() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.e30.86pkOAQxvnSDd91EThNNpOTbO-hbvxdssnFjQqT04NU", token); } @Test public void shouldSignEmptyTwoParams() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.e30.86pkOAQxvnSDd91EThNNpOTbO-hbvxdssnFjQqT04NU", token); } @Test public void shouldSignStringOrURI1() throws Exception { HashMap claims = new HashMap(); claims.put("iss", "foo"); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJmb28ifQ.UbvkKJx4ubG9SQYs3Hpe6FJl1ix89jSLw0I9GNTnLgY", token); } @Test public void shouldSignStringOrURI2() throws Exception { HashMap claims = new HashMap(); claims.put("sub", "http://foo"); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJodHRwOi8vZm9vIn0.EaYoTXJWUNd_1tWfZo4EZoKUP8hVMJm1LHBQNo4Xfwg", token); } @Test public void shouldSignStringOrURI3() throws Exception { HashMap claims = new HashMap(); claims.put("aud", ""); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhdWQiOiIifQ.T2EKheH_WVVwybctic8Sqk89miYVKADW0AeXOicDbz8", token); } @Test public void shouldSignStringOrURICollection() throws Exception { HashMap claims = new HashMap(); LinkedList aud = new LinkedList(); aud.add("xyz"); aud.add("ftp://foo"); claims.put("aud", aud); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhdWQiOlsieHl6IiwiZnRwOi8vZm9vIl19.WGpsdOnLJ2k7Rr4WeEuabHO4wNQIhJfPMZot1DrTUgA", token); } @Test public void shouldSignIntDate1() throws Exception { HashMap claims = new HashMap(); claims.put("exp", 123); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJleHAiOjEyM30.FzAXEHf0LVQPOyRQFftA1VBAj8RmZGEfwQIPSfg_DUg", token); } @Test public void shouldSignIntDate2() throws Exception { HashMap claims = new HashMap(); claims.put("nbf", 0); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJuYmYiOjB9.ChHEHjtyr4qOUMu6KDsa2BjGXtkGurboD5ljr99gVzw", token); } @Test public void shouldSignIntDate3() throws Exception { HashMap claims = new HashMap(); claims.put("iat", Long.MAX_VALUE); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjkyMjMzNzIwMzY4NTQ3NzU4MDd9.7yrsheXoAuqk5hDcbKmT3l6aDNNr7RMnbVe6kVkvv4M", token); } @Test public void shouldSignString() throws Exception { HashMap claims = new HashMap(); claims.put("jti", "foo"); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJqdGkiOiJmb28ifQ.CriA-W8LKO4bCxy3e2Nu7kx2MxgcHGyFu_GVLMX3bko", token); } @Test public void shouldSignNullEqualsMissing() throws Exception { HashMap claims = new HashMap(); for (String claimName : Arrays.asList("iss", "sub", "aud", "exp", "nbf", "iat", "jti")) { claims.put(claimName, null); } String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.e30.86pkOAQxvnSDd91EThNNpOTbO-hbvxdssnFjQqT04NU", token); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURI1() throws Exception { HashMap claims = new HashMap(); claims.put("iss", 0); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURI2() throws Exception { HashMap claims = new HashMap(); claims.put("sub", ":"); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURICollection1() throws Exception { HashMap claims = new HashMap(); claims.put("aud", 0); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURICollection2() throws Exception { HashMap claims = new HashMap(); claims.put("aud", Arrays.asList(0)); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURICollection3() throws Exception { HashMap claims = new HashMap(); claims.put("aud", Arrays.asList(":")); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectIntDate1() throws Exception { HashMap claims = new HashMap(); claims.put("exp", -1); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectIntDate2() throws Exception { HashMap claims = new HashMap(); claims.put("nbf", "100"); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectString() throws Exception { HashMap claims = new HashMap(); claims.put("jti", 100); signer.sign(claims); } @Test public void shouldOptionsNone() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims, new JWTSigner.Options()); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.e30.86pkOAQxvnSDd91EThNNpOTbO-hbvxdssnFjQqT04NU", token); } @Test public void shouldOptionsAll() throws Exception { HashMap claims = new HashMap(); signer.sign(claims, new JWTSigner.Options() .setExpirySeconds(1000).setNotValidBeforeLeeway(5) .setIssuedAt(true).setJwtId(true)); } @Test public void shouldOptionsAlgorithm() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims, new JWTSigner.Options().setAlgorithm(Algorithm.HS512)); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.e30.11MgCe-_uiheyy_kARCwhSZbeq3IkMn40GLQkczQ4Bjn_lkCYfSeqz0HeeYpitksiQ2bW47N0oGKCOYOlmQPyg", token); } } javaOIDCMsg-java-jwt-2.1.0/src/test/java/com/auth0/jwt/JWTSignerTest_Bytes.java000066400000000000000000000200671247465403000270530ustar00rootroot00000000000000package com.auth0.jwt; import org.junit.Test; import java.util.Arrays; import java.util.HashMap; import java.util.LinkedList; import static org.junit.Assert.assertEquals; public class JWTSignerTest_Bytes { private static JWTSigner signer = new JWTSigner(new byte[] { 109, 121, 32, 115, 101, 99, 114, 101, 116}); @Test public void shouldSignEmpty() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.e30.86pkOAQxvnSDd91EThNNpOTbO-hbvxdssnFjQqT04NU", token); } @Test public void shouldSignEmptyTwoParams() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.e30.86pkOAQxvnSDd91EThNNpOTbO-hbvxdssnFjQqT04NU", token); } @Test public void shouldSignStringOrURI1() throws Exception { HashMap claims = new HashMap(); claims.put("iss", "foo"); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJmb28ifQ.UbvkKJx4ubG9SQYs3Hpe6FJl1ix89jSLw0I9GNTnLgY", token); } @Test public void shouldSignStringOrURI2() throws Exception { HashMap claims = new HashMap(); claims.put("sub", "http://foo"); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJodHRwOi8vZm9vIn0.EaYoTXJWUNd_1tWfZo4EZoKUP8hVMJm1LHBQNo4Xfwg", token); } @Test public void shouldSignStringOrURI3() throws Exception { HashMap claims = new HashMap(); claims.put("aud", ""); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhdWQiOiIifQ.T2EKheH_WVVwybctic8Sqk89miYVKADW0AeXOicDbz8", token); } @Test public void shouldSignStringOrURICollection() throws Exception { HashMap claims = new HashMap(); LinkedList aud = new LinkedList(); aud.add("xyz"); aud.add("ftp://foo"); claims.put("aud", aud); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhdWQiOlsieHl6IiwiZnRwOi8vZm9vIl19.WGpsdOnLJ2k7Rr4WeEuabHO4wNQIhJfPMZot1DrTUgA", token); } @Test public void shouldSignIntDate1() throws Exception { HashMap claims = new HashMap(); claims.put("exp", 123); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJleHAiOjEyM30.FzAXEHf0LVQPOyRQFftA1VBAj8RmZGEfwQIPSfg_DUg", token); } @Test public void bytes_shouldSignIntDate1() throws Exception { HashMap claims = new HashMap(); claims.put("exp", 123); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJleHAiOjEyM30.FzAXEHf0LVQPOyRQFftA1VBAj8RmZGEfwQIPSfg_DUg", token); } @Test public void shouldSignIntDate2() throws Exception { HashMap claims = new HashMap(); claims.put("nbf", 0); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJuYmYiOjB9.ChHEHjtyr4qOUMu6KDsa2BjGXtkGurboD5ljr99gVzw", token); } @Test public void shouldSignIntDate3() throws Exception { HashMap claims = new HashMap(); claims.put("iat", Long.MAX_VALUE); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjkyMjMzNzIwMzY4NTQ3NzU4MDd9.7yrsheXoAuqk5hDcbKmT3l6aDNNr7RMnbVe6kVkvv4M", token); } @Test public void bytes_shouldSignIntDate2() throws Exception { HashMap claims = new HashMap(); claims.put("nbf", 0); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJuYmYiOjB9.ChHEHjtyr4qOUMu6KDsa2BjGXtkGurboD5ljr99gVzw", token); } @Test public void shouldSignString() throws Exception { HashMap claims = new HashMap(); claims.put("jti", "foo"); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJqdGkiOiJmb28ifQ.CriA-W8LKO4bCxy3e2Nu7kx2MxgcHGyFu_GVLMX3bko", token); } @Test public void shouldSignNullEqualsMissing() throws Exception { HashMap claims = new HashMap(); for (String claimName : Arrays.asList("iss", "sub", "aud", "exp", "nbf", "iat", "jti")) { claims.put(claimName, null); } String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.e30.86pkOAQxvnSDd91EThNNpOTbO-hbvxdssnFjQqT04NU", token); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURI1() throws Exception { HashMap claims = new HashMap(); claims.put("iss", 0); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURI2() throws Exception { HashMap claims = new HashMap(); claims.put("sub", ":"); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURICollection1() throws Exception { HashMap claims = new HashMap(); claims.put("aud", 0); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURICollection2() throws Exception { HashMap claims = new HashMap(); claims.put("aud", Arrays.asList(0)); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURICollection3() throws Exception { HashMap claims = new HashMap(); claims.put("aud", Arrays.asList(":")); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectIntDate1() throws Exception { HashMap claims = new HashMap(); claims.put("exp", -1); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectIntDate2() throws Exception { HashMap claims = new HashMap(); claims.put("nbf", "100"); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectString() throws Exception { HashMap claims = new HashMap(); claims.put("jti", 100); signer.sign(claims); } @Test public void shouldOptionsNone() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims, new JWTSigner.Options()); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.e30.86pkOAQxvnSDd91EThNNpOTbO-hbvxdssnFjQqT04NU", token); } @Test public void shouldOptionsAll() throws Exception { HashMap claims = new HashMap(); signer.sign(claims, new JWTSigner.Options() .setExpirySeconds(1000).setNotValidBeforeLeeway(5) .setIssuedAt(true).setJwtId(true)); } @Test public void shouldOptionsAlgorithm() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims, new JWTSigner.Options().setAlgorithm(Algorithm.HS512)); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.e30.11MgCe-_uiheyy_kARCwhSZbeq3IkMn40GLQkczQ4Bjn_lkCYfSeqz0HeeYpitksiQ2bW47N0oGKCOYOlmQPyg", token); } } javaOIDCMsg-java-jwt-2.1.0/src/test/java/com/auth0/jwt/JWTVerifierTest.java000066400000000000000000000161421247465403000262300ustar00rootroot00000000000000package com.auth0.jwt; import com.fasterxml.jackson.databind.JsonNode; import com.fasterxml.jackson.databind.ObjectMapper; import com.fasterxml.jackson.databind.node.ArrayNode; import com.fasterxml.jackson.databind.node.JsonNodeFactory; import com.fasterxml.jackson.databind.node.ObjectNode; import org.apache.commons.codec.binary.Base64; import org.junit.Test; import java.security.SignatureException; import static org.junit.Assert.assertEquals; public class JWTVerifierTest { private static final Base64 decoder = new Base64(true);; @Test(expected = IllegalArgumentException.class) public void constructorShouldFailOnEmptySecret() { new JWTVerifier(""); } @Test(expected = IllegalStateException.class) public void shouldFailOn1Segments() throws Exception { new JWTVerifier("such secret").verify("crypto"); } @Test(expected = IllegalStateException.class) public void shouldFailOn2Segments() throws Exception { new JWTVerifier("such secret").verify("much.crypto"); } @Test(expected = IllegalStateException.class) public void shouldFailOn4Segments() throws Exception { new JWTVerifier("such secret").verify("much.crypto.so.token"); } @Test(expected = IllegalStateException.class) public void shouldFailOnEmptyStringToken() throws Exception { new JWTVerifier("such secret").verify(""); } @Test(expected = IllegalStateException.class) public void shouldFailOnNullToken() throws Exception { new JWTVerifier("such secret").verify(null); } @Test(expected = IllegalStateException.class) public void shouldFailIfAlgorithmIsNotSetOnToken() throws Exception { new JWTVerifier("such secret").getAlgorithm(JsonNodeFactory.instance.objectNode()); } @Test(expected = IllegalStateException.class) public void shouldFailIfAlgorithmIsNotSupported() throws Exception { new JWTVerifier("such secret").getAlgorithm(createSingletonJSONNode("alg", "doge-crypt")); } @Test public void shouldWorkIfAlgorithmIsSupported() throws Exception { new JWTVerifier("such secret").getAlgorithm(createSingletonJSONNode("alg", "HS256")); } @Test(expected = SignatureException.class) public void shouldFailOnInvalidSignature() throws Exception { final String jws = "eyJ0eXAiOiJKV1QiLA0KICJhbGciOiJIUzI1NiJ9" + "." + "eyJpc3MiOiJqb2UiLA0KICJleHAiOjEzMDA4MTkzODAsDQogImh0dHA6Ly9leGFt" + "cGxlLmNvbS9pc19yb290Ijp0cnVlfQ" + "." + "suchsignature_plzvalidate_zomgtokens"; String secret = "AyM1SysPpbyDfgZld3umj1qzKObwVMkoqQ-EstJQLr_T-1qS0gZH75aKtMN3Yj0iPS4hcgUuTwjAzZr1Z9CAow"; new JWTVerifier(secret, "audience").verifySignature(jws.split("\\."), "HmacSHA256"); } @Test public void shouldVerifySignature() throws Exception { final String jws = "eyJ0eXAiOiJKV1QiLA0KICJhbGciOiJIUzI1NiJ9" + "." + "eyJpc3MiOiJqb2UiLA0KICJleHAiOjEzMDA4MTkzODAsDQogImh0dHA6Ly9leGFt" + "cGxlLmNvbS9pc19yb290Ijp0cnVlfQ" + "." + "dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk"; byte[] secret = decoder.decodeBase64("AyM1SysPpbyDfgZld3umj1qzKObwVMkoqQ-EstJQLr_T-1qS0gZH75aKtMN3Yj0iPS4hcgUuTwjAzZr1Z9CAow"); new JWTVerifier(secret, "audience") .verifySignature(jws.split("\\."), "HmacSHA256"); } @Test(expected = JWTExpiredException.class) public void shouldFailWhenExpired1SecondAgo() throws Exception { new JWTVerifier("such secret").verifyExpiration( createSingletonJSONNode("exp", Long.toString(System.currentTimeMillis() / 1000L - 1L))); } @Test public void shouldVerifyExpiration() throws Exception { new JWTVerifier("such secret").verifyExpiration( createSingletonJSONNode("exp", Long.toString(System.currentTimeMillis() / 1000L + 50L))); } @Test public void shouldVerifyIssuer() throws Exception { new JWTVerifier("such secret", "amaze audience", "very issuer") .verifyIssuer(createSingletonJSONNode("iss", "very issuer")); } @Test(expected = JWTIssuerException.class) public void shouldFailIssuer() throws Exception { new JWTVerifier("such secret", "amaze audience", "very issuer") .verifyIssuer(createSingletonJSONNode("iss", "wow")); } @Test public void shouldVerifyIssuerWhenNotFoundInClaimsSet() throws Exception { new JWTVerifier("such secret", "amaze audience", "very issuer") .verifyIssuer(JsonNodeFactory.instance.objectNode()); } @Test public void shouldVerifyAudience() throws Exception { new JWTVerifier("such secret", "amaze audience") .verifyAudience(createSingletonJSONNode("aud", "amaze audience")); } @Test(expected = JWTAudienceException.class) public void shouldFailAudience() throws Exception { new JWTVerifier("such secret", "amaze audience") .verifyAudience(createSingletonJSONNode("aud", "wow")); } @Test public void shouldVerifyAudienceWhenNotFoundInClaimsSet() throws Exception { new JWTVerifier("such secret", "amaze audience") .verifyAudience(JsonNodeFactory.instance.objectNode()); } @Test public void shouldVerifyNullAudience() throws Exception { new JWTVerifier("such secret") .verifyAudience(createSingletonJSONNode("aud", "wow")); } @Test public void shouldVerifyArrayAudience() throws Exception { new JWTVerifier("such secret", "amaze audience") .verifyAudience(createSingletonJSONNode("aud", new ObjectMapper().readValue("[ \"foo\", \"amaze audience\" ]", ArrayNode.class))); } @Test(expected = JWTAudienceException.class) public void shouldFailArrayAudience() throws Exception { new JWTVerifier("such secret", "amaze audience") .verifyAudience(createSingletonJSONNode("aud", new ObjectMapper().readValue("[ \"foo\" ]", ArrayNode.class))); } @Test public void decodeAndParse() throws Exception { final Base64 encoder = new Base64(true); final String encodedJSON = new String(encoder.encode("{\"some\": \"json\", \"number\": 123}".getBytes())); final JWTVerifier jwtVerifier = new JWTVerifier("secret", "audience"); final JsonNode decodedJSON = jwtVerifier.decodeAndParse(encodedJSON); assertEquals("json", decodedJSON.get("some").asText()); assertEquals(null, decodedJSON.get("unexisting_property")); assertEquals("123", decodedJSON.get("number").asText()); } public static JsonNode createSingletonJSONNode(String key, String value) { final ObjectNode jsonNodes = JsonNodeFactory.instance.objectNode(); jsonNodes.put(key, value); return jsonNodes; } public static JsonNode createSingletonJSONNode(String key, JsonNode value) { final ObjectNode jsonNodes = JsonNodeFactory.instance.objectNode(); jsonNodes.put(key, value); return jsonNodes; } } javaOIDCMsg-java-jwt-2.1.0/src/test/java/com/auth0/jwt/RoundtripTest.java000066400000000000000000000114021247465403000260500ustar00rootroot00000000000000package com.auth0.jwt; import static org.junit.Assert.assertEquals; import static org.junit.Assert.assertTrue; import java.io.UnsupportedEncodingException; import java.util.HashMap; import java.util.Map; import org.apache.commons.codec.binary.Base64; import org.junit.Test; /** * Test things that are difficult using signer or verifier alone. In particular, setting * claims via Options produces output dependent on current time. * */ public class RoundtripTest { private static final String SECRET; static { SECRET = "my secret"; } private static JWTSigner signer = new JWTSigner(SECRET); private static JWTVerifier verifier = new JWTVerifier(SECRET); /* * Roundtrip of different datatypes. */ @Test public void shouldEmpty() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims); Map decoded = verifier.verify(token); assertEquals(claims, decoded); } @Test public void shouldString() throws Exception { HashMap claims = new HashMap(); claims.put("foo", "bar"); String token = signer.sign(claims); Map decoded = verifier.verify(token); assertEquals(claims, decoded); } @Test public void shouldShort() throws Exception { HashMap claims = new HashMap(); claims.put("foo", (short) -10); String token = signer.sign(claims); Map decoded = verifier.verify(token); Number fooValue = (Number) decoded.get("foo"); decoded.put("foo", fooValue.shortValue()); assertEquals(claims, decoded); } @Test public void shouldLong() throws Exception { HashMap claims = new HashMap(); claims.put("foo", Long.MAX_VALUE); String token = signer.sign(claims); Map decoded = verifier.verify(token); assertEquals(claims, decoded); } @Test public void shouldObject() throws Exception { HashMap claims = new HashMap(); User user = new User(); user.setUsername("foo"); user.setPassword("bar"); claims.put("user", user); String token = signer.sign(claims); Map decoded = verifier.verify(token); HashMap expectedUser = new HashMap(); expectedUser.put("username", "foo"); expectedUser.put("password", "bar"); HashMap expected = new HashMap(); expected.put("user", expectedUser); assertEquals(expected, decoded); } @Test public void shouldBoolean() throws Exception { HashMap claims = new HashMap(); claims.put("foo", true); claims.put("bar", false); String token = signer.sign(claims); Map decoded = verifier.verify(token); assertEquals(claims, decoded); } /* * Setting claims via Options */ @Test public void shouldOptionsIat() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims, new JWTSigner.Options().setIssuedAt(true)); Map decoded = verifier.verify(token); assertEquals(decoded.size(), 1); long iat = ((Number) decoded.get("iat")).longValue(); assertTrue(iat >= System.currentTimeMillis() / 1000l); assertTrue(iat < System.currentTimeMillis() / 1000l + 10); } @Test public void shouldOptionsTimestamps() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims, new JWTSigner.Options() .setExpirySeconds(50).setNotValidBeforeLeeway(10).setIssuedAt(true)); Map decoded = verifier.verify(token); assertEquals(decoded.size(), 3); long iat = ((Number) decoded.get("iat")).longValue(); long exp = ((Number) decoded.get("exp")).longValue(); long nbf = ((Number) decoded.get("nbf")).longValue(); assertEquals(exp, iat + 50); assertEquals(nbf, iat - 10); } @Test public void shouldOptionsJti() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims, new JWTSigner.Options().setJwtId(true)); Map decoded = verifier.verify(token); assertEquals(decoded.size(), 1); assertEquals(((String) decoded.get("jti")).length(), 36); } } javaOIDCMsg-java-jwt-2.1.0/src/test/java/com/auth0/jwt/User.java000066400000000000000000000006541247465403000241470ustar00rootroot00000000000000package com.auth0.jwt; /** * Sample object for serialization */ public class User { private String username; private String password; public User() { } public String getUsername() { return username; } public void setUsername(String username) { this.username = username; } public String getPassword() { return password; } public void setPassword(String password) { this.password = password; } }