pax_global_header00006660000000000000000000000064130213034520014503gustar00rootroot0000000000000052 comment=2e5bb5c231332f467291ff5e94474f961806a650 javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/000077500000000000000000000000001302130345200170735ustar00rootroot00000000000000javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/.gitignore000066400000000000000000000045711302130345200210720ustar00rootroot00000000000000# Maven Shaded Jar Artifact dependency-reduced-pom.xml node_modules # Ignore Eclipse stuff .project .settings .classpath # Ignore Java and IntelliJ IDEA stuff .idea target *.iml ## Ignore Visual Studio temporary files, build results, and ## files generated by popular Visual Studio add-ons. packages # User-specific files *.suo *.user *.sln.docstates # Build results [Dd]ebug/ [Rr]elease/ x64/ build/ [Bb]in/ [Oo]bj/ # Enable "build/" folder in the NuGet Packages folder since NuGet packages use it for MSBuild targets !packages/*/build/ # MSTest test Results [Tt]est[Rr]esult*/ [Bb]uild[Ll]og.* *_i.c *_p.c *.ilk *.meta *.obj *.pch *.pdb *.pgc *.pgd *.rsp *.sbr *.tlb *.tli *.tlh *.tmp *.tmp_proj *.log *.vspscc *.vssscc .builds *.pidb *.log *.scc # Visual C++ cache files ipch/ *.aps *.ncb *.opensdf *.sdf *.cachefile # Visual Studio profiler *.psess *.vsp *.vspx # Guidance Automation Toolkit *.gpState # ReSharper is a .NET coding add-in _ReSharper*/ *.[Rr]e[Ss]harper # TeamCity is a build add-in _TeamCity* # DotCover is a Code Coverage Tool *.dotCover # NCrunch *.ncrunch* .*crunch*.local.xml # Installshield output folder [Ee]xpress/ # DocProject is a documentation generator add-in DocProject/buildhelp/ DocProject/Help/*.HxT DocProject/Help/*.HxC DocProject/Help/*.hhc DocProject/Help/*.hhk DocProject/Help/*.hhp DocProject/Help/Html2 DocProject/Help/html # Click-Once directory publish/ # Publish Web Output *.Publish.xml # NuGet Packages Directory ## TODO: If you have NuGet Package Restore enabled, uncomment the next line #packages/ # Windows Azure Build Output csx *.build.csdef # Windows Store app package directory AppPackages/ # Others sql/ *.Cache ClientBin/ [Ss]tyle[Cc]op.* ~$* *~ *.dbmdl *.[Pp]ublish.xml *.pfx *.publishsettings # RIA/Silverlight projects Generated_Code/ # Backup & report files from converting an old project file to a newer # Visual Studio version. Backup files are not needed, because we have git ;-) _UpgradeReport_Files/ Backup*/ UpgradeLog*.XML UpgradeLog*.htm # SQL Server files App_Data/*.mdf App_Data/*.ldf #LightSwitch generated files GeneratedArtifacts/ _Pvt_Extensions/ ModelManifest.xml # ========================= # Windows detritus # ========================= # Windows image file caches Thumbs.db ehthumbs.db # Folder config file Desktop.ini # Recycle Bin used on file shares $RECYCLE.BIN/ # Mac desktop service store files .DS_Store javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/.travis.yml000066400000000000000000000001701302130345200212020ustar00rootroot00000000000000language: java jdk: - oraclejdk7 branches: only: - master after_success: - bash <(curl -s https://codecov.io/bash)javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/LICENSE.txt000066400000000000000000000021411302130345200207140ustar00rootroot00000000000000The MIT License (MIT) Copyright (c) 2015 Auth0, Inc. (http://auth0.com) Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/README.md000066400000000000000000000052741302130345200203620ustar00rootroot00000000000000# Java JWT [![Build Status](https://travis-ci.org/auth0/java-jwt.svg?branch=master)](https://travis-ci.org/auth0/java-jwt) [![Coverage Status](https://img.shields.io/codecov/c/github/auth0/java-jwt/master.svg?style=flat-square)](https://codecov.io/github/auth0/java-jwt) [![License](http://img.shields.io/:license-mit-blue.svg?style=flat)](http://doge.mit-license.org) [![Maven Central](https://img.shields.io/maven-central/v/com.auth0/java-jwt.svg)](http://search.maven.org/#search%7Cga%7C1%7Ca%3A%22java-jwt%22) An implementation of [JSON Web Tokens](http://self-issued.info/docs/draft-ietf-oauth-json-web-token.html) developed against `draft-ietf-oauth-json-web-token-08`. ## Installation ### Maven ```xml com.auth0 java-jwt 2.2.1 ``` ### Gradle ```gradle compile 'com.auth0:java-jwt:2.2.1' ``` ## Usage ### Sign JWT (HS256) ```java final String issuer = "https://mydomain.com/"; final String secret = "{{secret used for signing}}"; final long iat = System.currentTimeMillis() / 1000L; // issued at claim final long exp = iat + 60L; // expires claim. In this case the token expires in 60 seconds final JWTSigner signer = new JWTSigner(secret); final HashMap claims = new HashMap(); claims.put("iss", issuer); claims.put("exp", exp); claims.put("iat", iat); final String jwt = signer.sign(claims); ``` ### Verify JWT (HS256) ```java final String secret = "{{secret used for signing}}"; try { final JWTVerifier verifier = new JWTVerifier(secret); final Map claims= verifier.verify(jwt); } catch (JWTVerifyException e) { // Invalid Token } ``` ### Validate aud & iss claims ```java final String secret = "{{secret used for signing}}"; try { final JWTVerifier verifier = new JWTVerifier(secret, "{{my-audience}}", "{{my-issuer}}"); final Map claims= verifier.verify(jwt); } catch (JWTVerifyException e) { // Invalid Token } ``` ### Why another JSON Web Token implementation for Java? We believe existing JWT implementations in Java are either too complex or not tested enough. This library aims to be simple and achieve the right level of abstraction. ## Issue Reporting If you have found a bug or if you have a feature request, please report them at this repository issues section. Please do not report security vulnerabilities on the public GitHub issue tracker. The [Responsible Disclosure Program](https://auth0.com/whitehat) details the procedure for disclosing security issues. ## Author [Auth0](https://auth0.com/) ## License This project is licensed under the MIT license. See the [LICENSE](LICENSE.txt) file for more info. javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/codecov.yml000066400000000000000000000003521302130345200212400ustar00rootroot00000000000000coverage: precision: 2 round: down range: "70...100" status: patch: default: if_no_uploads: error changes: true project: default: target: auto if_no_uploads: error comment: falsejavaOIDCMsgForCOMMENTS-java-jwt-2.2.2/pom.xml000066400000000000000000000121271302130345200204130ustar00rootroot00000000000000 4.0.0 org.sonatype.oss oss-parent 9 com.auth0 java-jwt 2.2.2 Java JWT Java implementation of JSON Web Token developed against draft-ietf-oauth-json-web-token-08. http://www.jwt.io 1.7 1.7 com.auth0.jwt.internal The MIT License http://www.opensource.org/licenses/mit-license.php repo https://github.com/auth0/java-jwt scm:git:git@github.com:auth0/java-jwt.git scm:git:git@github.com:auth0/java-jwt.git com.fasterxml.jackson.core jackson-databind 2.0.1 org.bouncycastle bcprov-jdk15on 1.52 commons-codec commons-codec 1.10 org.apache.commons commons-lang3 3.4 commons-io commons-io 1.3.2 junit junit 4.12 test org.apache.maven.plugins maven-compiler-plugin 3.1 ${java.source.version} ${java.target.version} UTF-8 org.jacoco jacoco-maven-plugin 0.7.7.201606060606 prepare-agent report test report org.apache.maven.plugins maven-shade-plugin 2.2 package shade *:* META-INF/*.SF META-INF/*.DSA META-INF/*.RSA false true com.fasterxml.jackson ${repackage.base}.com.fasterxml.jackson org.apache.commons.codec ${repackage.base}.org.apache.commons.codec org.apache.commons.io ${repackage.base}.org.apache.commons.io org.apache.commons.lang3 ${repackage.base}.org.apache.commons.lang3 org.bouncycastle ${repackage.base}.org.bouncycastle javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/000077500000000000000000000000001302130345200176625ustar00rootroot00000000000000javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/main/000077500000000000000000000000001302130345200206065ustar00rootroot00000000000000javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/main/java/000077500000000000000000000000001302130345200215275ustar00rootroot00000000000000javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/main/java/com/000077500000000000000000000000001302130345200223055ustar00rootroot00000000000000javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/main/java/com/auth0/000077500000000000000000000000001302130345200233265ustar00rootroot00000000000000javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/main/java/com/auth0/jwt/000077500000000000000000000000001302130345200241325ustar00rootroot00000000000000javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/main/java/com/auth0/jwt/Algorithm.java000066400000000000000000000014261302130345200267260ustar00rootroot00000000000000package com.auth0.jwt; import org.apache.commons.lang3.Validate; /** * Supported Library Algorithms * * https://docs.oracle.com/javase/7/docs/technotes/guides/security/StandardNames.html#KeyPairGenerator */ public enum Algorithm { HS256("HmacSHA256"), HS384("HmacSHA384"), HS512("HmacSHA512"), RS256("SHA256withRSA"), RS384("SHA384withRSA"), RS512("SHA512withRSA"); private Algorithm(final String value) { this.value = value; } private String value; public String getValue() { return value; } public static Algorithm findByName(final String name) throws JWTAlgorithmException { Validate.notNull(name); try { return Algorithm.valueOf(name); } catch (IllegalArgumentException e) { throw new JWTAlgorithmException("Unsupported algorithm: " + name); } } } javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/main/java/com/auth0/jwt/JWTAlgorithmException.java000066400000000000000000000007031302130345200311670ustar00rootroot00000000000000package com.auth0.jwt; /** * Represents Exception related to Algorithm - for example JWT header algorithm is unsupported / missing */ public class JWTAlgorithmException extends JWTVerifyException { public JWTAlgorithmException() {} public JWTAlgorithmException(final String message, final Throwable cause) { super(message, cause); } public JWTAlgorithmException(final String message) { super(message); } } javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/main/java/com/auth0/jwt/JWTAudienceException.java000066400000000000000000000020271302130345200307570ustar00rootroot00000000000000package com.auth0.jwt; import com.fasterxml.jackson.databind.JsonNode; import org.apache.commons.lang3.Validate; import java.util.ArrayList; import java.util.List; /** * Represents Exception related to Audience - for example illegal audience on JWT Verification */ public class JWTAudienceException extends JWTVerifyException { private JsonNode audienceNode; public JWTAudienceException(final JsonNode audienceNode) { this.audienceNode = audienceNode; } public JWTAudienceException(final String message, final JsonNode audienceNode) { super(message); this.audienceNode = audienceNode; } public List getAudience() { final ArrayList audience = new ArrayList<>(); if (audienceNode.isArray()) { for (final JsonNode jsonNode : audienceNode) { audience.add(jsonNode.textValue()); } } else if (audienceNode.isTextual()) { audience.add(audienceNode.textValue()); } return audience; } } javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/main/java/com/auth0/jwt/JWTExpiredException.java000066400000000000000000000010161302130345200306370ustar00rootroot00000000000000package com.auth0.jwt; /** * Represents Exception related to Expiration - for example JWT token has expired */ public class JWTExpiredException extends JWTVerifyException { private long expiration; public JWTExpiredException(final long expiration) { this.expiration = expiration; } public JWTExpiredException(final String message, final long expiration) { super(message); this.expiration = expiration; } public long getExpiration() { return expiration; }; } javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/main/java/com/auth0/jwt/JWTIssuerException.java000066400000000000000000000010051302130345200305070ustar00rootroot00000000000000package com.auth0.jwt; /** * Represents Exception related to Issuer - for example issuer mismatch / missing upon verification */ public class JWTIssuerException extends JWTVerifyException { private final String issuer; public JWTIssuerException(final String issuer) { this.issuer = issuer; } public JWTIssuerException(final String message, final String issuer) { super(message); this.issuer = issuer; } public String getIssuer() { return issuer; } } javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/main/java/com/auth0/jwt/JWTSigner.java000066400000000000000000000312621302130345200266150ustar00rootroot00000000000000package com.auth0.jwt; import com.fasterxml.jackson.databind.ObjectMapper; import com.fasterxml.jackson.databind.node.JsonNodeFactory; import com.fasterxml.jackson.databind.node.ObjectNode; import org.apache.commons.codec.binary.Base64; import org.apache.commons.lang3.StringUtils; import org.apache.commons.lang3.Validate; import org.bouncycastle.jce.provider.BouncyCastleProvider; import javax.crypto.Mac; import javax.crypto.spec.SecretKeySpec; import java.io.IOException; import java.io.UnsupportedEncodingException; import java.net.URI; import java.net.URISyntaxException; import java.security.*; import java.util.*; /** * Handles JWT Sign Operation * * Default algorithm when none provided is HMAC SHA-256 ("HS256") * * See associated library test cases for clear examples on usage * */ public class JWTSigner { static { if (Security.getProvider(BouncyCastleProvider.PROVIDER_NAME) == null) { Security.addProvider(new BouncyCastleProvider()); } } private byte[] secret; private PrivateKey privateKey; // Default algorithm HMAC SHA-256 ("HS256") protected final static Algorithm DEFAULT_ALGORITHM = Algorithm.HS256; public JWTSigner(final String secret) { this(secret.getBytes()); } public JWTSigner(final byte[] secret) { Validate.notNull(secret); this.secret = secret; } public JWTSigner(final PrivateKey privateKey) { this.privateKey = privateKey; } /** * Generate a JSON Web Token. * * @param claims A map of the JWT claims that form the payload. Registered claims * must be of appropriate Java datatype as following: *
    *
  • iss, sub: String *
  • exp, nbf, iat, jti: numeric, eg. Long *
  • aud: String, or Collection<String> *
* All claims with a null value are left out the JWT. * Any claims set automatically as specified in * the "options" parameter override claims in this map. * @param options Allow choosing the signing algorithm, and automatic setting of some registered claims. */ public String sign(final Map claims, final Options options) { Validate.notNull(claims); final Algorithm algorithm = (options != null && options.algorithm != null) ? options.algorithm : DEFAULT_ALGORITHM; final List segments = new ArrayList<>(); try { segments.add(encodedHeader(algorithm)); segments.add(encodedPayload(claims, options)); segments.add(encodedSignature(join(segments, "."), algorithm)); return join(segments, "."); } catch (Exception e) { throw new RuntimeException(e); } } /** * Generate a JSON Web Token using the default algorithm HMAC SHA-256 ("HS256") * and no claims automatically set. */ public String sign(final Map claims) { Validate.notNull(claims); return sign(claims, null); } /** * Generate the header part of a JSON web token. */ private String encodedHeader(final Algorithm algorithm) throws UnsupportedEncodingException { Validate.notNull(algorithm); // create the header final ObjectNode header = JsonNodeFactory.instance.objectNode(); header.put("typ", "JWT"); header.put("alg", algorithm.name()); return base64UrlEncode(header.toString().getBytes("UTF-8")); } /** * Generate the JSON web token payload string from the claims. * * @param options */ private String encodedPayload(final Map _claims, final Options options) throws IOException { final Map claims = new HashMap<>(_claims); enforceStringOrURI(claims, "iss"); enforceStringOrURI(claims, "sub"); enforceStringOrURICollection(claims, "aud"); enforceIntDate(claims, "exp"); enforceIntDate(claims, "nbf"); enforceIntDate(claims, "iat"); enforceString(claims, "jti"); if (options != null) { processPayloadOptions(claims, options); } final String payload = new ObjectMapper().writeValueAsString(claims); return base64UrlEncode(payload.getBytes("UTF-8")); } private void processPayloadOptions(final Map claims, final Options options) { Validate.notNull(claims); Validate.notNull(options); final long now = System.currentTimeMillis() / 1000l; if (options.expirySeconds != null) claims.put("exp", now + options.expirySeconds); if (options.notValidBeforeLeeway != null) claims.put("nbf", now - options.notValidBeforeLeeway); if (options.isIssuedAt()) claims.put("iat", now); if (options.isJwtId()) claims.put("jti", UUID.randomUUID().toString()); } // consider cleanup private void enforceIntDate(final Map claims, final String claimName) { Validate.notNull(claims); Validate.notNull(claimName); final Object value = handleNullValue(claims, claimName); if (value == null) return; if (!(value instanceof Number)) { throw new IllegalStateException(String.format("Claim '%s' is invalid: must be an instance of Number", claimName)); } final long longValue = ((Number) value).longValue(); if (longValue < 0) throw new IllegalStateException(String.format("Claim '%s' is invalid: must be non-negative", claimName)); claims.put(claimName, longValue); } // consider cleanup private void enforceStringOrURICollection(final Map claims, final String claimName) { final Object values = handleNullValue(claims, claimName); if (values == null) return; if (values instanceof Collection) { @SuppressWarnings({"unchecked"}) final Iterator iterator = ((Collection) values).iterator(); while (iterator.hasNext()) { Object value = iterator.next(); String error = checkStringOrURI(value); if (error != null) throw new IllegalStateException(String.format("Claim 'aud' element is invalid: %s", error)); } } else { enforceStringOrURI(claims, "aud"); } } // consider cleanup private void enforceStringOrURI(final Map claims, final String claimName) { final Object value = handleNullValue(claims, claimName); if (value == null) return; final String error = checkStringOrURI(value); if (error != null) throw new IllegalStateException(String.format("Claim '%s' is invalid: %s", claimName, error)); } // consider cleanup private void enforceString(final Map claims, final String claimName) { final Object value = handleNullValue(claims, claimName); if (value == null) return; if (!(value instanceof String)) throw new IllegalStateException(String.format("Claim '%s' is invalid: not a string", claimName)); } // consider cleanup private Object handleNullValue(final Map claims, final String claimName) { if (!claims.containsKey(claimName)) return null; final Object value = claims.get(claimName); if (value == null) { claims.remove(claimName); return null; } return value; } // consider cleanup private String checkStringOrURI(final Object value) { if (!(value instanceof String)) return "not a string"; final String stringOrUri = (String) value; if (!stringOrUri.contains(":")) return null; try { new URI(stringOrUri); } catch (URISyntaxException e) { return "not a valid URI"; } return null; } /** * Sign the header and payload */ private String encodedSignature(final String signingInput, final Algorithm algorithm) throws NoSuchAlgorithmException, InvalidKeyException, NoSuchProviderException, SignatureException, JWTAlgorithmException { Validate.notNull(signingInput); Validate.notNull(algorithm); switch (algorithm) { case HS256: case HS384: case HS512: return base64UrlEncode(signHmac(algorithm, signingInput, secret)); case RS256: case RS384: case RS512: return base64UrlEncode(signRs(algorithm, signingInput, privateKey)); default: throw new JWTAlgorithmException("Unsupported signing method"); } } /** * Safe URL encode a byte array to a String */ private String base64UrlEncode(final byte[] str) { Validate.notNull(str); return new String(Base64.encodeBase64URLSafe(str)); } /** * Sign an input string using HMAC and return the encrypted bytes */ private static byte[] signHmac(final Algorithm algorithm, final String msg, final byte[] secret) throws NoSuchAlgorithmException, InvalidKeyException { Validate.notNull(algorithm); Validate.notNull(msg); Validate.notNull(secret); final Mac mac = Mac.getInstance(algorithm.getValue()); mac.init(new SecretKeySpec(secret, algorithm.getValue())); return mac.doFinal(msg.getBytes()); } /** * Sign an input string using RSA and return the encrypted bytes */ private static byte[] signRs(final Algorithm algorithm, final String msg, final PrivateKey privateKey) throws NoSuchProviderException, NoSuchAlgorithmException, InvalidKeyException, SignatureException { Validate.notNull(algorithm); Validate.notNull(msg); Validate.notNull(privateKey); final byte[] messageBytes = msg.getBytes(); final Signature signature = Signature.getInstance(algorithm.getValue(), "BC"); signature.initSign(privateKey); signature.update(messageBytes); return signature.sign(); } private String join(final List input, final String separator) { Validate.notNull(input); Validate.notNull(separator); return StringUtils.join(input.iterator(), separator); } /** * An option object for JWT signing operation. Allow choosing the algorithm, and/or specifying * claims to be automatically set. */ public static class Options { private Algorithm algorithm; private Integer expirySeconds; private Integer notValidBeforeLeeway; private boolean issuedAt; private boolean jwtId; public Algorithm getAlgorithm() { return algorithm; } /** * Algorithm to sign JWT with. */ public Options setAlgorithm(final Algorithm algorithm) { this.algorithm = algorithm; return this; } public Integer getExpirySeconds() { return expirySeconds; } /** * Set JWT claim "exp" to current timestamp plus this value. * Overrides content of claims in sign(). */ public Options setExpirySeconds(final Integer expirySeconds) { this.expirySeconds = expirySeconds; return this; } public Integer getNotValidBeforeLeeway() { return notValidBeforeLeeway; } /** * Set JWT claim "nbf" to current timestamp minus this value. * Overrides content of claims in sign(). */ public Options setNotValidBeforeLeeway(final Integer notValidBeforeLeeway) { this.notValidBeforeLeeway = notValidBeforeLeeway; return this; } public boolean isIssuedAt() { return issuedAt; } /** * Set JWT claim "iat" to current timestamp. Defaults to false. * Overrides content of claims in sign(). */ public Options setIssuedAt(final boolean issuedAt) { this.issuedAt = issuedAt; return this; } public boolean isJwtId() { return jwtId; } /** * Set JWT claim "jti" to a pseudo random unique value (type 4 UUID). Defaults to false. * Overrides content of claims in sign(). */ public Options setJwtId(final boolean jwtId) { this.jwtId = jwtId; return this; } } } javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/main/java/com/auth0/jwt/JWTVerifier.java000066400000000000000000000221461302130345200271420ustar00rootroot00000000000000package com.auth0.jwt; import com.fasterxml.jackson.databind.JsonNode; import com.fasterxml.jackson.databind.ObjectMapper; import org.apache.commons.codec.binary.Base64; import org.apache.commons.lang3.Validate; import org.bouncycastle.jce.provider.BouncyCastleProvider; import javax.crypto.Mac; import javax.crypto.spec.SecretKeySpec; import java.io.IOException; import java.nio.charset.Charset; import java.security.*; import java.util.Map; /** * Handles JWT Verification Operations * * Validates claims and signature * * See associated library test cases for clear examples on usage * */ public class JWTVerifier { static { if (Security.getProvider(BouncyCastleProvider.PROVIDER_NAME) == null) { Security.addProvider(new BouncyCastleProvider()); } } private byte[] secret; private PublicKey publicKey; private final String audience; private final String issuer; private final Base64 decoder = new Base64(true); private final ObjectMapper mapper; public JWTVerifier(final String secret, final String audience, final String issuer) { this(secret.getBytes(Charset.forName("UTF-8")), audience, issuer); } public JWTVerifier(final String secret, final String audience) { this(secret, audience, null); } public JWTVerifier(final String secret) { this(secret, null, null); } public JWTVerifier(final byte[] secret, final String audience) { this(secret, audience, null); } public JWTVerifier(final byte[] secret) { this(secret, null, null); } public JWTVerifier(final byte[] secret, final String audience, final String issuer) { if (secret == null || secret.length == 0) { throw new IllegalArgumentException("Secret cannot be null or empty"); } mapper = new ObjectMapper(); this.secret = secret; this.audience = audience; this.issuer = issuer; } public JWTVerifier(final PublicKey publicKey, final String audience, final String issuer) { Validate.notNull(publicKey); mapper = new ObjectMapper(); this.publicKey = publicKey; this.audience = audience; this.issuer = issuer; } public JWTVerifier(final PublicKey publicKey, final String audience) { this(publicKey, audience, null); } public JWTVerifier(final PublicKey publicKey) { this(publicKey, null, null); } /** * Performs JWT validation * * @param token token to verify * @throws SignatureException when signature is invalid * @throws JWTVerifyException when expiration, issuer or audience are invalid * @throws JWTAlgorithmException when the algorithm is missing or unsupported * @throws IllegalStateException when token's structure is invalid or secret / public key does not match algorithm of token */ @SuppressWarnings("WeakerAccess") public Map verify(final String token) throws NoSuchAlgorithmException, InvalidKeyException, IllegalStateException, IOException, SignatureException, JWTVerifyException { if (token == null || "".equals(token)) { throw new IllegalStateException("token not set"); } final String[] pieces = token.split("\\."); if (pieces.length != 3) { throw new IllegalStateException("Wrong number of segments: " + pieces.length); } final JsonNode jwtHeader = decodeAndParse(pieces[0]); final Algorithm algorithm = getAlgorithm(jwtHeader); final JsonNode jwtPayload = decodeAndParse(pieces[1]); verifySignature(pieces, algorithm); verifyExpiration(jwtPayload); verifyIssuer(jwtPayload); verifyAudience(jwtPayload); return mapper.treeToValue(jwtPayload, Map.class); } void verifySignature(final String[] pieces, final Algorithm algorithm) throws NoSuchAlgorithmException, InvalidKeyException, SignatureException, JWTAlgorithmException, IllegalStateException { Validate.notNull(pieces); Validate.notNull(algorithm); if (pieces.length != 3) { throw new IllegalStateException("Wrong number of segments: " + pieces.length); } switch (algorithm) { case HS256: case HS384: case HS512: verifyHmac(algorithm, pieces, secret); return; case RS256: case RS384: case RS512: verifyRs(algorithm, pieces, publicKey); return; default: throw new JWTAlgorithmException("Unsupported signing method"); } } private void verifyHmac(final Algorithm algorithm, final String[] pieces, final byte[] secret) throws SignatureException, NoSuchAlgorithmException, InvalidKeyException { if (secret == null || secret.length == 0) { throw new IllegalStateException("Secret cannot be null or empty when using algorithm: " + algorithm.getValue()); } final Mac hmac = Mac.getInstance(algorithm.getValue()); hmac.init(new SecretKeySpec(secret, algorithm.getValue())); final byte[] sig = hmac.doFinal((pieces[0] + "." + pieces[1]).getBytes()); if (!MessageDigest.isEqual(sig, decoder.decode(pieces[2]))) { throw new SignatureException("signature verification failed"); } } private void verifyRs(final Algorithm algorithm, final String[] pieces, final PublicKey publicKey) throws SignatureException, NoSuchAlgorithmException, InvalidKeyException, JWTAlgorithmException { if (publicKey == null) { throw new IllegalStateException("PublicKey cannot be null when using algorithm: " + algorithm.getValue()); } final byte[] decodedSignatureBytes = new Base64(true).decode(pieces[2]); final byte[] headerPayloadBytes = (pieces[0] + "." + pieces[1]).getBytes(); final boolean verified = verifySignatureWithPublicKey(this.publicKey, headerPayloadBytes, decodedSignatureBytes, algorithm); if (!verified) { throw new SignatureException("signature verification failed"); } } private boolean verifySignatureWithPublicKey(final PublicKey publicKey, final byte[] messageBytes, final byte[] signatureBytes, final Algorithm algorithm) throws InvalidKeyException, SignatureException, NoSuchAlgorithmException, JWTAlgorithmException { Validate.notNull(publicKey); Validate.notNull(messageBytes); Validate.notNull(signatureBytes); Validate.notNull(algorithm); try { final Signature signature = Signature.getInstance(algorithm.getValue(), "BC"); signature.initVerify(publicKey); signature.update(messageBytes); return signature.verify(signatureBytes); } catch (NoSuchProviderException e) { throw new JWTAlgorithmException(e.getMessage(), e.getCause()); } } void verifyExpiration(final JsonNode jwtClaims) throws JWTExpiredException { Validate.notNull(jwtClaims); final long expiration = jwtClaims.has("exp") ? jwtClaims.get("exp").asLong(0) : 0; if (expiration != 0 && System.currentTimeMillis() / 1000L >= expiration) { throw new JWTExpiredException("jwt expired", expiration); } } void verifyIssuer(final JsonNode jwtClaims) throws JWTIssuerException { Validate.notNull(jwtClaims); if (this.issuer == null ) { return; } final String issuerFromToken = jwtClaims.has("iss") ? jwtClaims.get("iss").asText() : null; if (issuerFromToken == null || !issuer.equals(issuerFromToken)) { throw new JWTIssuerException("jwt issuer invalid", issuerFromToken); } } void verifyAudience(final JsonNode jwtClaims) throws JWTAudienceException { Validate.notNull(jwtClaims); if (audience == null) { return; } final JsonNode audNode = jwtClaims.get("aud"); if (audNode == null) { throw new JWTAudienceException("jwt audience invalid", null); } if (audNode.isArray()) { for (final JsonNode jsonNode : audNode) { if (audience.equals(jsonNode.textValue())) { return; } } } else if (audNode.isTextual()) { if (audience.equals(audNode.textValue())) { return; } } throw new JWTAudienceException("jwt audience invalid", audNode); } Algorithm getAlgorithm(final JsonNode jwtHeader) throws JWTAlgorithmException { Validate.notNull(jwtHeader); final String algorithmName = jwtHeader.has("alg") ? jwtHeader.get("alg").asText() : null; if (jwtHeader.get("alg") == null) { throw new IllegalStateException("algorithm not set"); } return Algorithm.findByName(algorithmName); } JsonNode decodeAndParse(final String b64String) throws IOException { Validate.notNull(b64String); final String jsonString = new String(decoder.decode(b64String), "UTF-8"); return mapper.readValue(jsonString, JsonNode.class); } } javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/main/java/com/auth0/jwt/JWTVerifyException.java000066400000000000000000000005401302130345200305040ustar00rootroot00000000000000package com.auth0.jwt; /** * Represents General Exception related to Verification */ public class JWTVerifyException extends Exception { public JWTVerifyException() {} public JWTVerifyException(final String message, final Throwable cause) { super(message, cause); } public JWTVerifyException(final String message) { super(message); } } javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/main/java/com/auth0/jwt/pem/000077500000000000000000000000001302130345200247135ustar00rootroot00000000000000javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/main/java/com/auth0/jwt/pem/PemFileReader.java000066400000000000000000000017571302130345200302340ustar00rootroot00000000000000package com.auth0.jwt.pem; import org.bouncycastle.util.io.pem.PemObject; import org.bouncycastle.util.io.pem.PemReader; import org.bouncycastle.util.io.pem.PemWriter; import java.io.*; /** * Can read PEM from disk - depends on BouncyCastle PemReader */ class PemFileReader { private PemObject pemObject; public PemFileReader(final String filename) throws IOException { final PemReader pemReader = new PemReader(new InputStreamReader(new FileInputStream(filename))); try { this.pemObject = pemReader.readPemObject(); } finally { pemReader.close(); } } public void write(final String filename) throws IOException { final PemWriter pemWriter = new PemWriter(new OutputStreamWriter(new FileOutputStream(filename))); try { pemWriter.writeObject(this.pemObject); } finally { pemWriter.close(); } } public PemObject getPemObject() { return pemObject; } } javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/main/java/com/auth0/jwt/pem/PemFileWriter.java000066400000000000000000000014721302130345200303000ustar00rootroot00000000000000package com.auth0.jwt.pem; import org.bouncycastle.util.io.pem.PemObject; import org.bouncycastle.util.io.pem.PemWriter; import java.io.FileOutputStream; import java.io.IOException; import java.io.OutputStreamWriter; import java.security.Key; /** * Can write PEM to disk - depends on BouncyCastle PemWriter */ class PemFileWriter { private PemObject pemObject; public PemFileWriter(final Key key, final String description) { this.pemObject = new PemObject(description, key.getEncoded()); } public void write(final String filename) throws IOException { final PemWriter pemWriter = new PemWriter(new OutputStreamWriter(new FileOutputStream(filename))); try { pemWriter.writeObject(this.pemObject); } finally { pemWriter.close(); } } } javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/main/java/com/auth0/jwt/pem/PemReader.java000066400000000000000000000053521302130345200274270ustar00rootroot00000000000000package com.auth0.jwt.pem; import org.apache.commons.lang3.Validate; import org.bouncycastle.jce.provider.BouncyCastleProvider; import java.io.File; import java.io.IOException; import java.nio.file.Files; import java.security.*; import java.security.cert.X509Certificate; import java.security.spec.InvalidKeySpecException; import java.security.spec.PKCS8EncodedKeySpec; import java.security.spec.X509EncodedKeySpec; /** * Read operations for PEM files */ public class PemReader { static { if (Security.getProvider(BouncyCastleProvider.PROVIDER_NAME) == null) { Security.addProvider(new BouncyCastleProvider()); } } public static PrivateKey readPrivateKey(final String filePath) throws NoSuchProviderException, NoSuchAlgorithmException, IOException, InvalidKeySpecException { Validate.notNull(filePath); final KeyFactory factory = KeyFactory.getInstance("RSA", "BC"); final PrivateKey privateKey = readPrivateKeyFromFile(factory, filePath); return privateKey; } public static PublicKey readPublicKey(final String filePath) throws NoSuchProviderException, NoSuchAlgorithmException, IOException, InvalidKeySpecException { Validate.notNull(filePath); final KeyFactory factory = KeyFactory.getInstance("RSA", "BC"); final PublicKey publicKey = readPublicKeyFromFile(factory, filePath); return publicKey; } private static PrivateKey readPrivateKeyFromFile(final KeyFactory factory, final String filename) throws InvalidKeySpecException, IOException { Validate.notNull(factory); Validate.notNull(filename); final PemFileReader pemFileReader = new PemFileReader(filename); final byte[] content = pemFileReader.getPemObject().getContent(); final PKCS8EncodedKeySpec privKeySpec = new PKCS8EncodedKeySpec(content); return factory.generatePrivate(privKeySpec); } private static PublicKey readPublicKeyFromFile(final KeyFactory factory, final String filename) throws InvalidKeySpecException, IOException { Validate.notNull(factory); Validate.notNull(filename); final File file = new File(filename); final byte[] data = Files.readAllBytes(file.toPath()); final X509Certificate cert = X509CertUtils.parse(new String(data)); if (cert != null) { java.security.PublicKey publicKey = cert.getPublicKey(); return publicKey; } else { final PemFileReader pemFileReader = new PemFileReader(filename); final byte[] content = pemFileReader.getPemObject().getContent(); final X509EncodedKeySpec pubKeySpec = new X509EncodedKeySpec(content); return factory.generatePublic(pubKeySpec); } } } javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/main/java/com/auth0/jwt/pem/PemWriter.java000066400000000000000000000022051302130345200274730ustar00rootroot00000000000000package com.auth0.jwt.pem; import org.apache.commons.lang3.Validate; import java.io.IOException; import java.security.Key; import java.security.interfaces.RSAPrivateKey; import java.security.interfaces.RSAPublicKey; /** * Write operations for PEM files */ public class PemWriter { public static void writePrivateKey(final RSAPrivateKey privateKey, final String description, final String filename) throws IOException { Validate.notNull(privateKey); Validate.notNull(filename); writePemFile(privateKey, description, filename); } public static void writePublicKey(final RSAPublicKey publicKey, final String description, final String filename) throws IOException { Validate.notNull(publicKey); Validate.notNull(filename); writePemFile(publicKey, description, filename); } public static void writePemFile(final Key key, final String description, final String filename) throws IOException { Validate.notNull(key); Validate.notNull(filename); final PemFileWriter pemFileWriter = new PemFileWriter(key, description); pemFileWriter.write(filename); } } javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/main/java/com/auth0/jwt/pem/X509CertUtils.java000066400000000000000000000036021302130345200300630ustar00rootroot00000000000000package com.auth0.jwt.pem; import org.apache.commons.codec.binary.Base64; import java.io.ByteArrayInputStream; import java.security.cert.Certificate; import java.security.cert.CertificateException; import java.security.cert.CertificateFactory; import java.security.cert.X509Certificate; /** * X.509 certificate utilities. */ public class X509CertUtils { private static final String PEM_BEGIN_MARKER = "-----BEGIN CERTIFICATE-----"; private static final String PEM_END_MARKER = "-----END CERTIFICATE-----"; /** * Parses a DER-encoded X.509 certificate. */ public static X509Certificate parse(final byte[] derEncodedCert) { if (derEncodedCert == null || derEncodedCert.length == 0) { return null; } try { final CertificateFactory cf = CertificateFactory.getInstance("X.509"); final Certificate cert = cf.generateCertificate(new ByteArrayInputStream(derEncodedCert)); if (!(cert instanceof X509Certificate)) { return null; } return (X509Certificate) cert; } catch (CertificateException e) { return null; } } /** * Parses a PEM-encoded X.509 certificate. */ public static X509Certificate parse(final String pemEncodedCert) { if (pemEncodedCert == null || pemEncodedCert.isEmpty()) { return null; } final int markerStart = pemEncodedCert.indexOf(PEM_BEGIN_MARKER); if (markerStart < 0) { return null; } String buf = pemEncodedCert.substring(markerStart + PEM_BEGIN_MARKER.length()); final int markerEnd = buf.indexOf(PEM_END_MARKER); if (markerEnd < 0) { return null; } buf = buf.substring(0, markerEnd); buf = buf.replaceAll("\\s", ""); return parse(new Base64(true).decodeBase64(buf)); } } javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/test/000077500000000000000000000000001302130345200206415ustar00rootroot00000000000000javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/test/java/000077500000000000000000000000001302130345200215625ustar00rootroot00000000000000javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/test/java/com/000077500000000000000000000000001302130345200223405ustar00rootroot00000000000000javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/test/java/com/auth0/000077500000000000000000000000001302130345200233615ustar00rootroot00000000000000javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/test/java/com/auth0/jwt/000077500000000000000000000000001302130345200241655ustar00rootroot00000000000000javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/test/java/com/auth0/jwt/JWTRoundTripRsa256Test.java000066400000000000000000000106321302130345200311100ustar00rootroot00000000000000package com.auth0.jwt; import org.bouncycastle.jce.provider.BouncyCastleProvider; import org.junit.Before; import org.junit.Test; import java.io.File; import java.io.IOException; import java.security.*; import java.security.interfaces.RSAPrivateKey; import java.security.interfaces.RSAPublicKey; import java.security.spec.InvalidKeySpecException; import java.util.*; import static com.auth0.jwt.pem.PemReader.readPrivateKey; import static com.auth0.jwt.pem.PemReader.readPublicKey; import static com.auth0.jwt.pem.PemWriter.writePrivateKey; import static com.auth0.jwt.pem.PemWriter.writePublicKey; import static junit.framework.TestCase.*; /** * Test that generates KeyPair - writes PEM files (private and public) to disk, * then reads in those PEM files (private and public) and uses them to Sign a JWT * and subsequently verify its correctness - hence "RoundTrip" */ public class JWTRoundTripRsa256Test { private static final int KEY_SIZE = 2048; static { if (Security.getProvider(BouncyCastleProvider.PROVIDER_NAME) == null) { Security.addProvider(new BouncyCastleProvider()); } } private File privateKeyPem; private File publicKeyPem; @Before public void createPemFiles() throws NoSuchAlgorithmException, NoSuchProviderException, IOException { // create key pair final KeyPairGenerator generator = KeyPairGenerator.getInstance("RSA", "BC"); generator.initialize(KEY_SIZE); final KeyPair keyPair = generator.generateKeyPair(); // write private key final RSAPrivateKey privateKey = (RSAPrivateKey) keyPair.getPrivate(); privateKeyPem = File.createTempFile("id_rsa", ""); writePrivateKey(privateKey, "RSA PRIVATE KEY", privateKeyPem.getAbsolutePath()); // write public key publicKeyPem = File.createTempFile("id_rsa", ".pub"); final RSAPublicKey publicKey = (RSAPublicKey) keyPair.getPublic(); writePublicKey(publicKey, "RSA PUBLIC KEY", publicKeyPem.getAbsolutePath()); } @Test public void roundTripCreatingSignedTokenAndVerifyingUsingRs256Algo() throws NoSuchProviderException, NoSuchAlgorithmException, IOException, InvalidKeySpecException, SignatureException, InvalidKeyException, JWTAlgorithmException, JWTVerifyException { // read pem files final PrivateKey privateKey = readPrivateKey(privateKeyPem.getAbsolutePath()); assertNotNull(privateKey); final PublicKey publicKey = readPublicKey(publicKeyPem.getAbsolutePath()); assertNotNull(publicKey); // create and sign a JWT final String issuer = "https://arcseldon.auth0.com/"; final String clientId = "xGXMKfEdcOcacZEU7Uq1mgWOtpUxBlL4"; // this is the audience final String name = "arcseldon"; final String email = "arcseldon+test@gmail.com"; final String subject = "auth0|576be978a93121cc48c7487d"; final List roles = new ArrayList<>(); roles.add("ROLE_ADMIN"); final long iat = System.currentTimeMillis() / 1000l; final long exp = iat + 3600L; final HashMap claims = new HashMap<>(); claims.put("name", name); claims.put("email", email); claims.put("email_verified", "true"); claims.put("iss", issuer); claims.put("roles", roles.toArray(new String[0])); claims.put("sub", subject); claims.put("aud", clientId); claims.put("exp", exp); claims.put("iat", iat); final JWTSigner jwtSigner = new JWTSigner(privateKey); final JWTSigner.Options options = new JWTSigner.Options(); options.setAlgorithm(Algorithm.RS256); final String token = jwtSigner.sign(claims, options); assertNotNull(token); final JWTVerifier jwtVerifier = new JWTVerifier(publicKey); final Map verifiedClaims = jwtVerifier.verify(token); assertEquals(name, verifiedClaims.get("name")); assertEquals(email, verifiedClaims.get("email")); assertEquals("true", verifiedClaims.get("email_verified")); assertTrue(roles.equals((List) verifiedClaims.get("roles"))); assertEquals(issuer, verifiedClaims.get("iss")); assertEquals(subject, verifiedClaims.get("sub")); assertEquals(clientId, verifiedClaims.get("aud")); assertTrue(exp == (Integer) verifiedClaims.get("exp")); assertTrue(iat == (Integer) verifiedClaims.get("iat")); } } javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/test/java/com/auth0/jwt/JWTRoundTripTest.java000066400000000000000000000122751302130345200302120ustar00rootroot00000000000000package com.auth0.jwt; import org.junit.Test; import java.util.HashMap; import java.util.Map; import static org.junit.Assert.assertEquals; import static org.junit.Assert.assertTrue; /** * Test things that are difficult using signer or verifier alone. In particular, setting * claims via Options produces output dependent on current time. * */ public class JWTRoundTripTest { private static final String SECRET; static { SECRET = "my secret"; } private static JWTSigner signer = new JWTSigner(SECRET); private static JWTVerifier verifier = new JWTVerifier(SECRET); /* * Roundtrip of different datatypes. */ @Test public void shouldEmpty() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims); Map decoded = verifier.verify(token); assertEquals(claims, decoded); } @Test public void shouldString() throws Exception { HashMap claims = new HashMap(); claims.put("foo", "bar"); String token = signer.sign(claims); Map decoded = verifier.verify(token); assertEquals(claims, decoded); } @Test public void shouldShort() throws Exception { HashMap claims = new HashMap(); claims.put("foo", (short) -10); String token = signer.sign(claims); Map decoded = verifier.verify(token); Number fooValue = (Number) decoded.get("foo"); decoded.put("foo", fooValue.shortValue()); assertEquals(claims, decoded); } @Test public void shouldLong() throws Exception { HashMap claims = new HashMap(); claims.put("foo", Long.MAX_VALUE); String token = signer.sign(claims); Map decoded = verifier.verify(token); assertEquals(claims, decoded); } @Test public void shouldObject() throws Exception { HashMap claims = new HashMap(); User user = new User(); user.setUsername("foo"); user.setPassword("bar"); claims.put("user", user); String token = signer.sign(claims); Map decoded = verifier.verify(token); HashMap expectedUser = new HashMap(); expectedUser.put("username", "foo"); expectedUser.put("password", "bar"); HashMap expected = new HashMap(); expected.put("user", expectedUser); assertEquals(expected, decoded); } @Test public void shouldBoolean() throws Exception { HashMap claims = new HashMap(); claims.put("foo", true); claims.put("bar", false); String token = signer.sign(claims); Map decoded = verifier.verify(token); assertEquals(claims, decoded); } /* * Setting claims via Options */ @Test public void shouldOptionsIat() throws Exception { HashMap claims = new HashMap(); long before = System.currentTimeMillis(); String token = signer.sign(claims, new JWTSigner.Options().setIssuedAt(true)); long after = System.currentTimeMillis(); Map decoded = verifier.verify(token); assertEquals(decoded.size(), 1); long iat = ((Number) decoded.get("iat")).longValue(); assertTrue(iat >= before / 1000l); assertTrue(iat <= after / 1000l); } @Test public void shouldOptionsTimestamps() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims, new JWTSigner.Options() .setExpirySeconds(50).setNotValidBeforeLeeway(10).setIssuedAt(true)); Map decoded = verifier.verify(token); assertEquals(decoded.size(), 3); long iat = ((Number) decoded.get("iat")).longValue(); long exp = ((Number) decoded.get("exp")).longValue(); long nbf = ((Number) decoded.get("nbf")).longValue(); assertEquals(exp, iat + 50); assertEquals(nbf, iat - 10); } @Test public void shouldOptionsJti() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims, new JWTSigner.Options().setJwtId(true)); Map decoded = verifier.verify(token); assertEquals(decoded.size(), 1); assertEquals(((String) decoded.get("jti")).length(), 36); } public static class User { private String username; private String password; public User() { } public String getUsername() { return username; } public void setUsername(String username) { this.username = username; } public String getPassword() { return password; } public void setPassword(String password) { this.password = password; } } } javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/test/java/com/auth0/jwt/JWTSignerBytesTest.java000066400000000000000000000203241302130345200305140ustar00rootroot00000000000000package com.auth0.jwt; import com.auth0.jwt.Algorithm; import com.auth0.jwt.JWTSigner; import org.junit.Test; import java.util.Arrays; import java.util.HashMap; import java.util.LinkedList; import static org.junit.Assert.assertEquals; /** * General library JwtSigner unit tests using byte constructor alternative for secret */ public class JWTSignerBytesTest { private static JWTSigner signer = new JWTSigner(new byte[] { 109, 121, 32, 115, 101, 99, 114, 101, 116}); @Test public void shouldSignEmpty() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.e30.86pkOAQxvnSDd91EThNNpOTbO-hbvxdssnFjQqT04NU", token); } @Test public void shouldSignEmptyTwoParams() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.e30.86pkOAQxvnSDd91EThNNpOTbO-hbvxdssnFjQqT04NU", token); } @Test public void shouldSignStringOrURI1() throws Exception { HashMap claims = new HashMap(); claims.put("iss", "foo"); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJmb28ifQ.UbvkKJx4ubG9SQYs3Hpe6FJl1ix89jSLw0I9GNTnLgY", token); } @Test public void shouldSignStringOrURI2() throws Exception { HashMap claims = new HashMap(); claims.put("sub", "http://foo"); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJodHRwOi8vZm9vIn0.EaYoTXJWUNd_1tWfZo4EZoKUP8hVMJm1LHBQNo4Xfwg", token); } @Test public void shouldSignStringOrURI3() throws Exception { HashMap claims = new HashMap(); claims.put("aud", ""); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhdWQiOiIifQ.T2EKheH_WVVwybctic8Sqk89miYVKADW0AeXOicDbz8", token); } @Test public void shouldSignStringOrURICollection() throws Exception { HashMap claims = new HashMap(); LinkedList aud = new LinkedList(); aud.add("xyz"); aud.add("ftp://foo"); claims.put("aud", aud); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhdWQiOlsieHl6IiwiZnRwOi8vZm9vIl19.WGpsdOnLJ2k7Rr4WeEuabHO4wNQIhJfPMZot1DrTUgA", token); } @Test public void shouldSignIntDate1() throws Exception { HashMap claims = new HashMap(); claims.put("exp", 123); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJleHAiOjEyM30.FzAXEHf0LVQPOyRQFftA1VBAj8RmZGEfwQIPSfg_DUg", token); } @Test public void bytes_shouldSignIntDate1() throws Exception { HashMap claims = new HashMap(); claims.put("exp", 123); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJleHAiOjEyM30.FzAXEHf0LVQPOyRQFftA1VBAj8RmZGEfwQIPSfg_DUg", token); } @Test public void shouldSignIntDate2() throws Exception { HashMap claims = new HashMap(); claims.put("nbf", 0); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJuYmYiOjB9.ChHEHjtyr4qOUMu6KDsa2BjGXtkGurboD5ljr99gVzw", token); } @Test public void shouldSignIntDate3() throws Exception { HashMap claims = new HashMap(); claims.put("iat", Long.MAX_VALUE); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjkyMjMzNzIwMzY4NTQ3NzU4MDd9.7yrsheXoAuqk5hDcbKmT3l6aDNNr7RMnbVe6kVkvv4M", token); } @Test public void bytes_shouldSignIntDate2() throws Exception { HashMap claims = new HashMap(); claims.put("nbf", 0); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJuYmYiOjB9.ChHEHjtyr4qOUMu6KDsa2BjGXtkGurboD5ljr99gVzw", token); } @Test public void shouldSignString() throws Exception { HashMap claims = new HashMap(); claims.put("jti", "foo"); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJqdGkiOiJmb28ifQ.CriA-W8LKO4bCxy3e2Nu7kx2MxgcHGyFu_GVLMX3bko", token); } @Test public void shouldSignNullEqualsMissing() throws Exception { HashMap claims = new HashMap(); for (String claimName : Arrays.asList("iss", "sub", "aud", "exp", "nbf", "iat", "jti")) { claims.put(claimName, null); } String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.e30.86pkOAQxvnSDd91EThNNpOTbO-hbvxdssnFjQqT04NU", token); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURI1() throws Exception { HashMap claims = new HashMap(); claims.put("iss", 0); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURI2() throws Exception { HashMap claims = new HashMap(); claims.put("sub", ":"); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURICollection1() throws Exception { HashMap claims = new HashMap(); claims.put("aud", 0); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURICollection2() throws Exception { HashMap claims = new HashMap(); claims.put("aud", Arrays.asList(0)); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURICollection3() throws Exception { HashMap claims = new HashMap(); claims.put("aud", Arrays.asList(":")); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectIntDate1() throws Exception { HashMap claims = new HashMap(); claims.put("exp", -1); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectIntDate2() throws Exception { HashMap claims = new HashMap(); claims.put("nbf", "100"); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectString() throws Exception { HashMap claims = new HashMap(); claims.put("jti", 100); signer.sign(claims); } @Test public void shouldOptionsNone() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims, new JWTSigner.Options()); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.e30.86pkOAQxvnSDd91EThNNpOTbO-hbvxdssnFjQqT04NU", token); } @Test public void shouldOptionsAll() throws Exception { HashMap claims = new HashMap(); signer.sign(claims, new JWTSigner.Options() .setExpirySeconds(1000).setNotValidBeforeLeeway(5) .setIssuedAt(true).setJwtId(true)); } @Test public void shouldOptionsAlgorithm() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims, new JWTSigner.Options().setAlgorithm(Algorithm.HS512)); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.e30.11MgCe-_uiheyy_kARCwhSZbeq3IkMn40GLQkczQ4Bjn_lkCYfSeqz0HeeYpitksiQ2bW47N0oGKCOYOlmQPyg", token); } } javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/test/java/com/auth0/jwt/JWTSignerTest.java000066400000000000000000000164731302130345200275170ustar00rootroot00000000000000package com.auth0.jwt; import org.junit.Test; import java.util.Arrays; import java.util.HashMap; import java.util.LinkedList; import static org.junit.Assert.assertEquals; /** * General library JwtSigner related unit tests */ public class JWTSignerTest { private static JWTSigner signer = new JWTSigner("my secret"); @Test public void shouldSignEmpty() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.e30.86pkOAQxvnSDd91EThNNpOTbO-hbvxdssnFjQqT04NU", token); } @Test public void shouldSignEmptyTwoParams() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.e30.86pkOAQxvnSDd91EThNNpOTbO-hbvxdssnFjQqT04NU", token); } @Test public void shouldSignStringOrURI1() throws Exception { HashMap claims = new HashMap(); claims.put("iss", "foo"); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJmb28ifQ.UbvkKJx4ubG9SQYs3Hpe6FJl1ix89jSLw0I9GNTnLgY", token); } @Test public void shouldSignStringOrURI2() throws Exception { HashMap claims = new HashMap(); claims.put("sub", "http://foo"); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJodHRwOi8vZm9vIn0.EaYoTXJWUNd_1tWfZo4EZoKUP8hVMJm1LHBQNo4Xfwg", token); } @Test public void shouldSignStringOrURI3() throws Exception { HashMap claims = new HashMap(); claims.put("aud", ""); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhdWQiOiIifQ.T2EKheH_WVVwybctic8Sqk89miYVKADW0AeXOicDbz8", token); } @Test public void shouldSignStringOrURICollection() throws Exception { HashMap claims = new HashMap(); LinkedList aud = new LinkedList(); aud.add("xyz"); aud.add("ftp://foo"); claims.put("aud", aud); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhdWQiOlsieHl6IiwiZnRwOi8vZm9vIl19.WGpsdOnLJ2k7Rr4WeEuabHO4wNQIhJfPMZot1DrTUgA", token); } @Test public void shouldSignIntDate1() throws Exception { HashMap claims = new HashMap(); claims.put("exp", 123); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJleHAiOjEyM30.FzAXEHf0LVQPOyRQFftA1VBAj8RmZGEfwQIPSfg_DUg", token); } @Test public void shouldSignIntDate2() throws Exception { HashMap claims = new HashMap(); claims.put("nbf", 0); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJuYmYiOjB9.ChHEHjtyr4qOUMu6KDsa2BjGXtkGurboD5ljr99gVzw", token); } @Test public void shouldSignIntDate3() throws Exception { HashMap claims = new HashMap(); claims.put("iat", Long.MAX_VALUE); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjkyMjMzNzIwMzY4NTQ3NzU4MDd9.7yrsheXoAuqk5hDcbKmT3l6aDNNr7RMnbVe6kVkvv4M", token); } @Test public void shouldSignString() throws Exception { HashMap claims = new HashMap(); claims.put("jti", "foo"); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJqdGkiOiJmb28ifQ.CriA-W8LKO4bCxy3e2Nu7kx2MxgcHGyFu_GVLMX3bko", token); } @Test public void shouldSignNullEqualsMissing() throws Exception { HashMap claims = new HashMap(); for (String claimName : Arrays.asList("iss", "sub", "aud", "exp", "nbf", "iat", "jti")) { claims.put(claimName, null); } String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.e30.86pkOAQxvnSDd91EThNNpOTbO-hbvxdssnFjQqT04NU", token); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURI1() throws Exception { HashMap claims = new HashMap(); claims.put("iss", 0); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURI2() throws Exception { HashMap claims = new HashMap(); claims.put("sub", ":"); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURICollection1() throws Exception { HashMap claims = new HashMap(); claims.put("aud", 0); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURICollection2() throws Exception { HashMap claims = new HashMap(); claims.put("aud", Arrays.asList(0)); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURICollection3() throws Exception { HashMap claims = new HashMap(); claims.put("aud", Arrays.asList(":")); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectIntDate1() throws Exception { HashMap claims = new HashMap(); claims.put("exp", -1); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectIntDate2() throws Exception { HashMap claims = new HashMap(); claims.put("nbf", "100"); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectString() throws Exception { HashMap claims = new HashMap(); claims.put("jti", 100); signer.sign(claims); } @Test public void shouldOptionsNone() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims, new JWTSigner.Options()); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.e30.86pkOAQxvnSDd91EThNNpOTbO-hbvxdssnFjQqT04NU", token); } @Test public void shouldOptionsAll() throws Exception { HashMap claims = new HashMap(); signer.sign(claims, new JWTSigner.Options() .setExpirySeconds(1000).setNotValidBeforeLeeway(5) .setIssuedAt(true).setJwtId(true)); } @Test public void shouldOptionsAlgorithm() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims, new JWTSigner.Options().setAlgorithm(Algorithm.HS512)); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.e30.11MgCe-_uiheyy_kARCwhSZbeq3IkMn40GLQkczQ4Bjn_lkCYfSeqz0HeeYpitksiQ2bW47N0oGKCOYOlmQPyg", token); } } javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/test/java/com/auth0/jwt/JWTSignerTest_Bytes.java000066400000000000000000000200671302130345200306570ustar00rootroot00000000000000package com.auth0.jwt; import org.junit.Test; import java.util.Arrays; import java.util.HashMap; import java.util.LinkedList; import static org.junit.Assert.assertEquals; public class JWTSignerTest_Bytes { private static JWTSigner signer = new JWTSigner(new byte[] { 109, 121, 32, 115, 101, 99, 114, 101, 116}); @Test public void shouldSignEmpty() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.e30.86pkOAQxvnSDd91EThNNpOTbO-hbvxdssnFjQqT04NU", token); } @Test public void shouldSignEmptyTwoParams() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.e30.86pkOAQxvnSDd91EThNNpOTbO-hbvxdssnFjQqT04NU", token); } @Test public void shouldSignStringOrURI1() throws Exception { HashMap claims = new HashMap(); claims.put("iss", "foo"); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJmb28ifQ.UbvkKJx4ubG9SQYs3Hpe6FJl1ix89jSLw0I9GNTnLgY", token); } @Test public void shouldSignStringOrURI2() throws Exception { HashMap claims = new HashMap(); claims.put("sub", "http://foo"); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJodHRwOi8vZm9vIn0.EaYoTXJWUNd_1tWfZo4EZoKUP8hVMJm1LHBQNo4Xfwg", token); } @Test public void shouldSignStringOrURI3() throws Exception { HashMap claims = new HashMap(); claims.put("aud", ""); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhdWQiOiIifQ.T2EKheH_WVVwybctic8Sqk89miYVKADW0AeXOicDbz8", token); } @Test public void shouldSignStringOrURICollection() throws Exception { HashMap claims = new HashMap(); LinkedList aud = new LinkedList(); aud.add("xyz"); aud.add("ftp://foo"); claims.put("aud", aud); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJhdWQiOlsieHl6IiwiZnRwOi8vZm9vIl19.WGpsdOnLJ2k7Rr4WeEuabHO4wNQIhJfPMZot1DrTUgA", token); } @Test public void shouldSignIntDate1() throws Exception { HashMap claims = new HashMap(); claims.put("exp", 123); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJleHAiOjEyM30.FzAXEHf0LVQPOyRQFftA1VBAj8RmZGEfwQIPSfg_DUg", token); } @Test public void bytes_shouldSignIntDate1() throws Exception { HashMap claims = new HashMap(); claims.put("exp", 123); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJleHAiOjEyM30.FzAXEHf0LVQPOyRQFftA1VBAj8RmZGEfwQIPSfg_DUg", token); } @Test public void shouldSignIntDate2() throws Exception { HashMap claims = new HashMap(); claims.put("nbf", 0); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJuYmYiOjB9.ChHEHjtyr4qOUMu6KDsa2BjGXtkGurboD5ljr99gVzw", token); } @Test public void shouldSignIntDate3() throws Exception { HashMap claims = new HashMap(); claims.put("iat", Long.MAX_VALUE); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjkyMjMzNzIwMzY4NTQ3NzU4MDd9.7yrsheXoAuqk5hDcbKmT3l6aDNNr7RMnbVe6kVkvv4M", token); } @Test public void bytes_shouldSignIntDate2() throws Exception { HashMap claims = new HashMap(); claims.put("nbf", 0); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJuYmYiOjB9.ChHEHjtyr4qOUMu6KDsa2BjGXtkGurboD5ljr99gVzw", token); } @Test public void shouldSignString() throws Exception { HashMap claims = new HashMap(); claims.put("jti", "foo"); String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJqdGkiOiJmb28ifQ.CriA-W8LKO4bCxy3e2Nu7kx2MxgcHGyFu_GVLMX3bko", token); } @Test public void shouldSignNullEqualsMissing() throws Exception { HashMap claims = new HashMap(); for (String claimName : Arrays.asList("iss", "sub", "aud", "exp", "nbf", "iat", "jti")) { claims.put(claimName, null); } String token = signer.sign(claims); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.e30.86pkOAQxvnSDd91EThNNpOTbO-hbvxdssnFjQqT04NU", token); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURI1() throws Exception { HashMap claims = new HashMap(); claims.put("iss", 0); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURI2() throws Exception { HashMap claims = new HashMap(); claims.put("sub", ":"); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURICollection1() throws Exception { HashMap claims = new HashMap(); claims.put("aud", 0); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURICollection2() throws Exception { HashMap claims = new HashMap(); claims.put("aud", Arrays.asList(0)); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectStringOrURICollection3() throws Exception { HashMap claims = new HashMap(); claims.put("aud", Arrays.asList(":")); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectIntDate1() throws Exception { HashMap claims = new HashMap(); claims.put("exp", -1); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectIntDate2() throws Exception { HashMap claims = new HashMap(); claims.put("nbf", "100"); signer.sign(claims); } @Test(expected = Exception.class) public void shouldFailExpectString() throws Exception { HashMap claims = new HashMap(); claims.put("jti", 100); signer.sign(claims); } @Test public void shouldOptionsNone() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims, new JWTSigner.Options()); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.e30.86pkOAQxvnSDd91EThNNpOTbO-hbvxdssnFjQqT04NU", token); } @Test public void shouldOptionsAll() throws Exception { HashMap claims = new HashMap(); signer.sign(claims, new JWTSigner.Options() .setExpirySeconds(1000).setNotValidBeforeLeeway(5) .setIssuedAt(true).setJwtId(true)); } @Test public void shouldOptionsAlgorithm() throws Exception { HashMap claims = new HashMap(); String token = signer.sign(claims, new JWTSigner.Options().setAlgorithm(Algorithm.HS512)); assertEquals("eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.e30.11MgCe-_uiheyy_kARCwhSZbeq3IkMn40GLQkczQ4Bjn_lkCYfSeqz0HeeYpitksiQ2bW47N0oGKCOYOlmQPyg", token); } } javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/test/java/com/auth0/jwt/JWTVerifierRsa256Test.java000066400000000000000000000163621302130345200307430ustar00rootroot00000000000000package com.auth0.jwt; import com.auth0.jwt.pem.X509CertUtils; import org.apache.commons.codec.binary.Base64; import org.junit.Test; import java.io.File; import java.nio.file.Files; import java.security.PublicKey; import java.security.SignatureException; import java.security.cert.X509Certificate; import java.util.HashMap; import java.util.Map; import static com.auth0.jwt.pem.PemReader.readPublicKey; import static junit.framework.TestCase.assertNotNull; /** * RS256 Verification Checks */ public class JWTVerifierRsa256Test { private final static String RESOURCES_DIR = "src/test/resources/auth0-pem/"; private final static String MISMATCHED_RESOURCES_DIR = "src/test/resources/test-pem/"; private final static String PUBLIC_KEY_PEM_FILENAME = "key.pem"; private final static String MISMATCHED_PUBLIC_KEY_PEM_FILENAME = "test-auth0.pem"; /** * Here we pass in a public key that does not correspond to the private key that was used to sign the JWT Token */ @Test(expected = SignatureException.class) public void shouldFailOnInvalidSignature() throws Exception { final String token = "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IlFVTkVRelZCTXpoRk1FVTNRMFZGTURJNFFqYzROakJDTkRSQ1JFRkNSalkzUWpnMFJEVXlOZyJ9" + "." + "eyJyb2xlcyI6WyJST0xFX0FETUlOIl0sInVzZXJfaWQiOiJhdXRoMHw1NzcxMGU5ZDE0MWIwN2YyMmU3NDNhYzciLCJlbWFpbCI6ImFyY3NlbGRvbit0cm5AZ21haWwuY29tIiwiZW1haWxfdmVyaWZpZWQiOnRydWUsImlzcyI6Imh0dHBzOi8vYWppbG9uMS5hdXRoMC5jb20vIiwic3ViIjoiYXV0aDB8NTc3MTBlOWQxNDFiMDdmMjJlNzQzYWM3IiwiYXVkIjoibm5ld1NobHBHVDFBbkZpY1ExUGlKWXdheENuejE4eUIiLCJleHAiOjE0Njc3MDk5OTMsImlhdCI6MTQ2NzY3Mzk5M30" + "." + "gQML78V8H6WN3MSN1QhrFG4AxNTdFChPBQxrnuqPF0iBvf35v_z9oDzTERaPBDWFHzWT17h0ADxpl7tCIo43k0FoFie6RHa5j82iHnOKPhcqM5hArfKDYk3G5gc30lVmFiMm8PX8WKzDExygLqXZVnIzfB-EmcJWW_2fLiFEMpNC8KDTBVAiyds_n5kiGmW6F_QpLt11af3BDy71tg2fuqkyJE6pEHd1HsTHNCFQzWt7GevVB0HouJS099p6GphsH3kIhmAvHp5j267uYv49sndiUaLq7bL6GZnzv8dhzgQlucHvNaIZ6m6m6n4t43cjUxSrO0ZP9Crv9NBDJme0cA"; final PublicKey publicKey = readPublicKey(MISMATCHED_RESOURCES_DIR + MISMATCHED_PUBLIC_KEY_PEM_FILENAME); assertNotNull(publicKey); new JWTVerifier(publicKey, "audience").verifySignature(token.split("\\."), Algorithm.RS256); } /** * Here we pass in a public key that correctly corresponds to the private key that was used to sign the JWT Token */ @Test public void shouldVerifySignature() throws Exception { final String token = "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IlFVTkVRelZCTXpoRk1FVTNRMFZGTURJNFFqYzROakJDTkRSQ1JFRkNSalkzUWpnMFJEVXlOZyJ9" + "." + "eyJyb2xlcyI6WyJST0xFX0FETUlOIl0sInVzZXJfaWQiOiJhdXRoMHw1NzcxMGU5ZDE0MWIwN2YyMmU3NDNhYzciLCJlbWFpbCI6ImFyY3NlbGRvbit0cm5AZ21haWwuY29tIiwiZW1haWxfdmVyaWZpZWQiOnRydWUsImlzcyI6Imh0dHBzOi8vYWppbG9uMS5hdXRoMC5jb20vIiwic3ViIjoiYXV0aDB8NTc3MTBlOWQxNDFiMDdmMjJlNzQzYWM3IiwiYXVkIjoibm5ld1NobHBHVDFBbkZpY1ExUGlKWXdheENuejE4eUIiLCJleHAiOjE0Njc3MDk5OTMsImlhdCI6MTQ2NzY3Mzk5M30" + "." + "gQML78V8H6WN3MSN1QhrFG4AxNTdFChPBQxrnuqPF0iBvf35v_z9oDzTERaPBDWFHzWT17h0ADxpl7tCIo43k0FoFie6RHa5j82iHnOKPhcqM5hArfKDYk3G5gc30lVmFiMm8PX8WKzDExygLqXZVnIzfB-EmcJWW_2fLiFEMpNC8KDTBVAiyds_n5kiGmW6F_QpLt11af3BDy71tg2fuqkyJE6pEHd1HsTHNCFQzWt7GevVB0HouJS099p6GphsH3kIhmAvHp5j267uYv49sndiUaLq7bL6GZnzv8dhzgQlucHvNaIZ6m6m6n4t43cjUxSrO0ZP9Crv9NBDJme0cA"; final PublicKey publicKey = readPublicKey(RESOURCES_DIR + PUBLIC_KEY_PEM_FILENAME); assertNotNull(publicKey); new JWTVerifier(publicKey, "audience").verifySignature(token.split("\\."), Algorithm.RS256); } /** * Here we modify the signature on an otherwise legal JWT Token and check verification using the correct Public Key fails */ @Test(expected = SignatureException.class) public void shouldFailOnInvalidJWTTokenSignature() throws Exception { final String token = "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IlFVTkVRelZCTXpoRk1FVTNRMFZGTURJNFFqYzROakJDTkRSQ1JFRkNSalkzUWpnMFJEVXlOZyJ9" + "." + "eyJyb2xlcyI6WyJST0xFX0FETUlOIl0sInVzZXJfaWQiOiJhdXRoMHw1NzcxMGU5ZDE0MWIwN2YyMmU3NDNhYzciLCJlbWFpbCI6ImFyY3NlbGRvbit0cm5AZ21haWwuY29tIiwiZW1haWxfdmVyaWZpZWQiOnRydWUsImlzcyI6Imh0dHBzOi8vYWppbG9uMS5hdXRoMC5jb20vIiwic3ViIjoiYXV0aDB8NTc3MTBlOWQxNDFiMDdmMjJlNzQzYWM3IiwiYXVkIjoibm5ld1NobHBHVDFBbkZpY1ExUGlKWXdheENuejE4eUIiLCJleHAiOjE0Njc3MDk5OTMsImlhdCI6MTQ2NzY3Mzk5M30" + "." + "XXXXX8V8H6WN3MSN1QhrFG4AxNTdFChPBQxrnuqPF0iBvf35v_z9oDzTERaPBDWFHzWT17h0ADxpl7tCIo43k0FoFie6RHa5j82iHnOKPhcqM5hArfKDYk3G5gc30lVmFiMm8PX8WKzDExygLqXZVnIzfB-EmcJWW_2fLiFEMpNC8KDTBVAiyds_n5kiGmW6F_QpLt11af3BDy71tg2fuqkyJE6pEHd1HsTHNCFQzWt7GevVB0HouJS099p6GphsH3kIhmAvHp5j267uYv49sndiUaLq7bL6GZnzv8dhzgQlucHvNaIZ6m6m6n4t43cjUxSrO0ZP9Crv9NBDJme0cA"; final PublicKey publicKey = readPublicKey(RESOURCES_DIR + PUBLIC_KEY_PEM_FILENAME); assertNotNull(publicKey); new JWTVerifier(publicKey, "audience").verifySignature(token.split("\\."), Algorithm.RS256); } /** * Here we modify the payload section on an otherwise legal JWT Token and check verification using the correct Public Key and * unaltered JWT signature (which now doesn't match the payload) fails */ @Test(expected = SignatureException.class) public void shouldFailOnInvalidJWTTokenPayload() throws Exception { final String token = "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IlFVTkVRelZCTXpoRk1FVTNRMFZGTURJNFFqYzROakJDTkRSQ1JFRkNSalkzUWpnMFJEVXlOZyJ9" + "." + "XXXXX2xlcyI6WyJST0xFX0FETUlOIl0sInVzZXJfaWQiOiJhdXRoMHw1NzcxMGU5ZDE0MWIwN2YyMmU3NDNhYzciLCJlbWFpbCI6ImFyY3NlbGRvbit0cm5AZ21haWwuY29tIiwiZW1haWxfdmVyaWZpZWQiOnRydWUsImlzcyI6Imh0dHBzOi8vYWppbG9uMS5hdXRoMC5jb20vIiwic3ViIjoiYXV0aDB8NTc3MTBlOWQxNDFiMDdmMjJlNzQzYWM3IiwiYXVkIjoibm5ld1NobHBHVDFBbkZpY1ExUGlKWXdheENuejE4eUIiLCJleHAiOjE0Njc3MDk5OTMsImlhdCI6MTQ2NzY3Mzk5M30" + "." + "gQML78V8H6WN3MSN1QhrFG4AxNTdFChPBQxrnuqPF0iBvf35v_z9oDzTERaPBDWFHzWT17h0ADxpl7tCIo43k0FoFie6RHa5j82iHnOKPhcqM5hArfKDYk3G5gc30lVmFiMm8PX8WKzDExygLqXZVnIzfB-EmcJWW_2fLiFEMpNC8KDTBVAiyds_n5kiGmW6F_QpLt11af3BDy71tg2fuqkyJE6pEHd1HsTHNCFQzWt7GevVB0HouJS099p6GphsH3kIhmAvHp5j267uYv49sndiUaLq7bL6GZnzv8dhzgQlucHvNaIZ6m6m6n4t43cjUxSrO0ZP9Crv9NBDJme0cA"; final PublicKey publicKey = readPublicKey(RESOURCES_DIR + PUBLIC_KEY_PEM_FILENAME); assertNotNull(publicKey); new JWTVerifier(publicKey, "audience").verifySignature(token.split("\\."), Algorithm.RS256); } @Test(expected = IllegalStateException.class) public void shouldFailWithJwtThaHasTamperedAlgorithm() throws Exception { final File file = new File(RESOURCES_DIR + PUBLIC_KEY_PEM_FILENAME); final byte[] data = Files.readAllBytes(file.toPath()); JWTSigner signer = new JWTSigner(data); Map claims = new HashMap<>(); claims.put("sub", "userid"); JWTSigner.Options options = new JWTSigner.Options(); options.setAlgorithm(Algorithm.HS256); String jwt = signer.sign(claims, options); new JWTVerifier(data).verify(jwt); final PublicKey publicKey = readPublicKey(RESOURCES_DIR + PUBLIC_KEY_PEM_FILENAME); new JWTVerifier(publicKey).verify(jwt); } } javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/test/java/com/auth0/jwt/JWTVerifierTest.java000066400000000000000000000224261302130345200300360ustar00rootroot00000000000000package com.auth0.jwt; import com.fasterxml.jackson.databind.JsonNode; import com.fasterxml.jackson.databind.ObjectMapper; import com.fasterxml.jackson.databind.node.ArrayNode; import com.fasterxml.jackson.databind.node.JsonNodeFactory; import com.fasterxml.jackson.databind.node.ObjectNode; import org.apache.commons.codec.binary.Base64; import org.junit.Rule; import org.junit.Test; import org.junit.rules.ExpectedException; import java.security.SignatureException; import static org.junit.Assert.assertEquals; /** * General library JWTVerifier related unit tests */ public class JWTVerifierTest { private static final Base64 decoder = new Base64(true); @Rule public ExpectedException expectedException = ExpectedException.none(); @Test public void constructorShouldFailOnEmptySecret() { expectedException.expect(IllegalArgumentException.class); new JWTVerifier(""); } @Test public void shouldFailOn1Segments() throws Exception { expectedException.expect(IllegalStateException.class); signatureVerifier().verify("crypto"); } @Test public void shouldFailOn2Segments() throws Exception { expectedException.expect(IllegalStateException.class); signatureVerifier().verify("much.crypto"); } @Test public void shouldFailOn4Segments() throws Exception { expectedException.expect(IllegalStateException.class); signatureVerifier().verify("much.crypto.so.token"); } @Test public void shouldFailOnEmptyStringToken() throws Exception { expectedException.expect(IllegalStateException.class); signatureVerifier().verify(""); } @Test public void shouldFailOnNullToken() throws Exception { expectedException.expect(IllegalStateException.class); signatureVerifier().verify(null); } @Test public void shouldFailIfAlgorithmIsNotSetOnToken() throws Exception { expectedException.expect(IllegalStateException.class); signatureVerifier().getAlgorithm(JsonNodeFactory.instance.objectNode()); } @Test public void shouldFailIfAlgorithmIsNotSupported() throws Exception { expectedException.expect(JWTAlgorithmException.class); signatureVerifier().getAlgorithm(createSingletonJSONNode("alg", "doge-crypt")); } @Test public void shouldWorkIfAlgorithmIsSupported() throws Exception { signatureVerifier().getAlgorithm(createSingletonJSONNode("alg", "HS256")); } @Test public void shouldFailOnInvalidSignature() throws Exception { expectedException.expect(SignatureException.class); final String jws = "eyJ0eXAiOiJKV1QiLA0KICJhbGciOiJIUzI1NiJ9" + "." + "eyJpc3MiOiJqb2UiLA0KICJleHAiOjEzMDA4MTkzODAsDQogImh0dHA6Ly9leGFt" + "cGxlLmNvbS9pc19yb290Ijp0cnVlfQ" + "." + "suchsignature_plzvalidate_zomgtokens"; String secret = "AyM1SysPpbyDfgZld3umj1qzKObwVMkoqQ-EstJQLr_T-1qS0gZH75aKtMN3Yj0iPS4hcgUuTwjAzZr1Z9CAow"; signatureVerifier(secret).verifySignature(jws.split("\\."), Algorithm.HS256); } @Test public void shouldVerifySignature() throws Exception { final String jws = "eyJ0eXAiOiJKV1QiLA0KICJhbGciOiJIUzI1NiJ9" + "." + "eyJpc3MiOiJqb2UiLA0KICJleHAiOjEzMDA4MTkzODAsDQogImh0dHA6Ly9leGFt" + "cGxlLmNvbS9pc19yb290Ijp0cnVlfQ" + "." + "dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk"; byte[] secret = decoder.decode("AyM1SysPpbyDfgZld3umj1qzKObwVMkoqQ-EstJQLr_T-1qS0gZH75aKtMN3Yj0iPS4hcgUuTwjAzZr1Z9CAow"); signatureVerifier(secret) .verifySignature(jws.split("\\."), Algorithm.HS256); } @Test public void shouldFailWithJwtThaHasTamperedAlgorithm() throws Exception { expectedException.expect(IllegalStateException.class); String tamperedAlg = "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJqb2UiLCJleHAiOjEzMDA4MTkzODAsImh0dHA6Ly9leGFtcGxlLmNvbS9pc19yb290Ijp0cnVlfQ.QRsN2SlYJ3EEn7P9dnZGsq9tjyv3giOWzZJzhy67zZs"; byte[] secret = decoder.decode("AyM1SysPpbyDfgZld3umj1qzKObwVMkoqQ-EstJQLr_T-1qS0gZH75aKtMN3Yj0iPS4hcgUuTwjAzZr1Z9CAow"); JWTVerifier verifier = new JWTVerifier(secret); verifier.verify(tamperedAlg); } @Test public void shouldFailWhenExpired1SecondAgo() throws Exception { expectedException.expect(JWTExpiredException.class); signatureVerifier().verifyExpiration( createSingletonJSONNode("exp", Long.toString(System.currentTimeMillis() / 1000L - 1L))); } @Test public void shouldVerifyExpiration() throws Exception { signatureVerifier().verifyExpiration( createSingletonJSONNode("exp", Long.toString(System.currentTimeMillis() / 1000L + 50L))); } @Test public void shouldVerifyIssuer() throws Exception { issuerVerifier("very issuer") .verifyIssuer(createSingletonJSONNode("iss", "very issuer")); } @Test public void shouldFailIssuer() throws Exception { expectedException.expect(JWTIssuerException.class); issuerVerifier("very issuer") .verifyIssuer(createSingletonJSONNode("iss", "wow")); } @Test public void shouldVerifyIssuerWhenNotFoundInClaimsSet() throws Exception { expectedException.expect(JWTIssuerException.class); issuerVerifier("very issuer") .verifyIssuer(JsonNodeFactory.instance.objectNode()); } @Test public void shouldVerifyAudience() throws Exception { audienceVerifier("amaze audience") .verifyAudience(createSingletonJSONNode("aud", "amaze audience")); } @Test public void shouldFailAudience() throws Exception { expectedException.expect(JWTAudienceException.class); audienceVerifier("amaze audience") .verifyAudience(createSingletonJSONNode("aud", "wow")); } @Test public void shouldVerifyAudienceWhenNotFoundInClaimsSet() throws Exception { expectedException.expect(JWTAudienceException.class); audienceVerifier("amaze audience") .verifyAudience(JsonNodeFactory.instance.objectNode()); } @Test public void shouldVerifyNullAudience() throws Exception { signatureVerifier() .verifyAudience(createSingletonJSONNode("aud", "wow")); } @Test public void shouldVerifyArrayAudience() throws Exception { audienceVerifier("amaze audience") .verifyAudience(createSingletonJSONNode("aud", new ObjectMapper().readValue("[ \"foo\", \"amaze audience\" ]", ArrayNode.class))); } @Test public void shouldFailArrayAudience() throws Exception { expectedException.expect(JWTAudienceException.class); audienceVerifier("amaze audience") .verifyAudience(createSingletonJSONNode("aud", new ObjectMapper().readValue("[ \"foo\" ]", ArrayNode.class))); } @Test public void decodeAndParse() throws Exception { final Base64 encoder = new Base64(true); final String encodedJSON = new String(encoder.encode("{\"some\": \"json\", \"number\": 123}".getBytes())); final JWTVerifier jwtVerifier = new JWTVerifier("secret", "audience"); final JsonNode decodedJSON = jwtVerifier.decodeAndParse(encodedJSON); assertEquals("json", decodedJSON.get("some").asText()); assertEquals(null, decodedJSON.get("unexisting_property")); assertEquals("123", decodedJSON.get("number").asText()); } @Test public void shouldVerifyAudienceFromToken() throws Exception { expectedException.expect(JWTAudienceException.class); JWTVerifier verifier = new JWTVerifier("I.O.U a secret", "samples-api", null); verifier.verify("eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.wLlz9xDltxqKHQC7BeauPi5Q4KQK4nDjlRqQPvKVLYk"); } @Test public void shouldVerifyIssuerFromToken() throws Exception { expectedException.expect(JWTIssuerException.class); JWTVerifier verifier = new JWTVerifier("I.O.U a secret", null, "samples.auth0.com"); verifier.verify("eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.wLlz9xDltxqKHQC7BeauPi5Q4KQK4nDjlRqQPvKVLYk"); } private static JWTVerifier signatureVerifier() { return new JWTVerifier("such secret"); } private static JWTVerifier signatureVerifier(String secret) { return new JWTVerifier(secret); } private static JWTVerifier signatureVerifier(byte[] secret) { return new JWTVerifier(secret); } private static JWTVerifier issuerVerifier(String issuer) { return new JWTVerifier("such secret", null, issuer); } private static JWTVerifier audienceVerifier(String audience) { return new JWTVerifier("such secret", audience); } private static JsonNode createSingletonJSONNode(String key, String value) { final ObjectNode jsonNodes = JsonNodeFactory.instance.objectNode(); jsonNodes.put(key, value); return jsonNodes; } private static JsonNode createSingletonJSONNode(String key, JsonNode value) { final ObjectNode jsonNodes = JsonNodeFactory.instance.objectNode(); jsonNodes.put(key, value); return jsonNodes; } } javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/test/resources/000077500000000000000000000000001302130345200226535ustar00rootroot00000000000000javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/test/resources/auth0-pem/000077500000000000000000000000001302130345200244535ustar00rootroot00000000000000javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/test/resources/auth0-pem/key.pem000066400000000000000000000020551302130345200257500ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIIC6jCCAdKgAwIBAgIJRJ6BX2ejIsNmMA0GCSqGSIb3DQEBBQUAMBwxGjAYBgNV BAMTEWFqaWxvbjEuYXV0aDAuY29tMB4XDTE2MDYxNDA0MjUxMloXDTMwMDIyMTA0 MjUxMlowHDEaMBgGA1UEAxMRYWppbG9uMS5hdXRoMC5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDWP321jJBlY521B3JqLC7RxFdsIQdDCViav2Z+ dIOWyN09LxGrAy7pmV8GIHeu5lrmrfzUTfV+MzMyF+9UzRvq79qmMEWfyHBRNCOs Ig3Sw0DHm3OoyCpdXBAF5F+IclPe2r2Bey7zlXkTUIZ+q4qLuDNKFiONyZdhkBUa C1TsuplTv7DF2IHwnQpI4MyvRghy8QvxbqMZOj39mBrQYMLCWz2/PXIYRWiu3lxx WSZS4GJya/2mTZtIatacz1t1W6dLeoS+OuTsPWl4qHsLj14EYPOevaw+8Nzh4eAa tFRP2VOSm1nqDipuLIRnERSHEF4B6YYiG9EI8E3KrogoeGovAgMBAAGjLzAtMAwG A1UdEwQFMAMBAf8wHQYDVR0OBBYEFK1l4Why6NUQ8g/7cdIbFtSbBYYjMA0GCSqG SIb3DQEBBQUAA4IBAQAH+pc6gt5Hyjmqe6GxMRuDqd6/rX8c0EN0XmZ4wDfgbN7l tN3iQ6i3R5I66GuohfxHFxxCYBnlQcZPFJ4/ZcfgtK42md0dx9Lt1se7E12B32mc WISWs/dtrKLF6x+kNXJj0j05C0fMBuuxaqmTWJuJZ7LOJG3VS/jLR8t9TIdWexzL xIDrf8MYjR9D+phLOJmf0ZZMbfxpCb4+txVs+yMAqhhiosXmjluLEIo2X5fejC92 GVNY+Dm7S1ecWvYwzvx6R8VNqbAZ0QbVU/1dTPff57dfeMlpiXdGf6vc7OLgs8re Om1fjmXhB9X6G+RYkaReI2VYkfU7ZRIQ/dI9HnYN -----END CERTIFICATE-----javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/test/resources/test-pem/000077500000000000000000000000001302130345200244115ustar00rootroot00000000000000javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/test/resources/test-pem/test-auth0.key000066400000000000000000000032131302130345200271200ustar00rootroot00000000000000-----BEGIN RSA PRIVATE KEY----- MIIEowIBAAKCAQEAxmJWY0eJcuV2uBtLnQ4004fuknbODo5xIyRhkYNkls5n9OrB q4Lok6cjv7G2Q8mxAdlIUmzhTSyuNkrMMKZrPaMsAkNKE/aNpeWuSLXqcMs8T/8g YCDcEmC5KYEJakNtKb3ZX2FKwT4yHHpsNomLDzJD5DyJKbRpNBm2no7ggIy7TQRJ 2H00mogQIQu8/fUANXVeGPshvLJU8MXEy/eiXkHJIT3DDA4VSr/C/tfP0tGJSNTM 874urc4zej+4INuTuMPtesZS47J0AsPxQuxengS4M76cVt5cH+Iqd1nKe5UqiSKv LCXacPYg/T/Kdx0tBnwHIjKo/cbzZ+r+XynsCwIDAQABAoIBAFPWWwu5v6x+rJ1B a8MDre93Eqty6cHdEJL5XQJRtMDGmcg3LYF94SwFBmaMg6pCIjvVx2qN+OjUaQso sQIeUlPKEV8jcLrfBx2E4xJ3Tow8V1C3UMdPG7Hojler4H633/oz8RkN1Lm1vxep 5PFnTw0tAOQDcTPeulb6RuLbHqU0FEnf/jVOMhtPLcMAwJ3fkAJQ+ljFW2VKCQ83 d+ci1p+NHY/dbGLSR4lK58mVghcRMO3zhe5scrbECHJMfT6fCb2TXdjaueFUGC6+ fqUXvDj8HRfUilzTegNq8ZhwgMSw1HeX/PuiczSKc3aHYSsohMBugTErnkW+qF4Z kE+kxgECgYEA/sm7umcyFuZME+RWYL8Gsp8agH1OGEgsmIiMi1z6RTlTmdR8fN18 ItzXyW+363VZln/1b5wCaPdLIxgASxybLAaxnKAXfmL7QvyVAaMwxj7N0ogvMQoN x2VuSGZSam2+LFVIMWHq1C+3fvVnCDLm6oHvIMK/zvEsPBBtz+L6rlECgYEAx1Pr KogaGHCi1XgsrNv9aFaayRvmhzZbmiigF0iWKAd3KKww94BdyyGSVfMfyL23LAbM QDCrDNGpYAnpNZo/cL+OcGPYzlPsWDBrJub1HOA/H3WQlP4oEcfdbmJZhIkEwTGF HaCHynEu4ekiCrWz9+XVNCquTyqnmaVDEzAfEZsCgYA8jQbfUt0Vkh+sboyUq3FV C/jJZn4jyStICNOV3z/fKbOTkGsRZbW1t1RVHAbSn23uFXTn1GTCO1sQ+QhA0YiT Gvgk5+sNb0qVbd+fpv/VbWGO0iyc8+24YIOoEyEtB+21LYNdsQ6U5M4wDvQwf6Bf RQfmekIJVUmU8LaYPDIlMQKBgDSRiT/aTSeM7STnYMDl89sEnCXV2eJnD5mEhVQe rJs5/M8ZOoDLtfDQlctdJ1DF1/0gfdWgADyNPuI5OuwMFhciLequKoufzoEjo97K onJPIdamJs9kiCTIVTm7bmhpyns5GCZMJAPb/cVOus+gRCpozuXHK9ltIm5/C0WQ N2FpAoGBAOss6RN2krieqbn1mG8e2v5mMUd0CJkiJu2y5MnF3dYHXSQ3/ePAh/Yg JOthpgYgBh+mV0DLqJhx/1DLS/xiqcoHDlndQDmYbtvvY7RlMo00+nGzkRVOfrqy hC+1KsYHGPbSQixNQXtvFbAAVMSo+RRBkVGINYGDFnlQUpkppYRk -----END RSA PRIVATE KEY----- javaOIDCMsgForCOMMENTS-java-jwt-2.2.2/src/test/resources/test-pem/test-auth0.pem000066400000000000000000000026741302130345200271230ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIIEDzCCAvegAwIBAgIJALr9HwgrQ7GeMA0GCSqGSIb3DQEBBQUAMGIxGDAWBgNV BAMTD2F1dGgwLmF1dGgwLmNvbTESMBAGA1UEChMJQXV0aDAgTExDMQswCQYDVQQG EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDAeFw0x MjEyMjkxNTMwNDdaFw0xMzAxMjgxNTMwNDdaMGIxGDAWBgNVBAMTD2F1dGgwLmF1 dGgwLmNvbTESMBAGA1UEChMJQXV0aDAgTExDMQswCQYDVQQGEwJVUzETMBEGA1UE CBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAMZiVmNHiXLldrgbS50ONNOH7pJ2zg6OcSMkYZGDZJbO Z/TqwauC6JOnI7+xtkPJsQHZSFJs4U0srjZKzDCmaz2jLAJDShP2jaXlrki16nDL PE//IGAg3BJguSmBCWpDbSm92V9hSsE+Mhx6bDaJiw8yQ+Q8iSm0aTQZtp6O4ICM u00ESdh9NJqIECELvP31ADV1Xhj7IbyyVPDFxMv3ol5BySE9wwwOFUq/wv7Xz9LR iUjUzPO+Lq3OM3o/uCDbk7jD7XrGUuOydALD8ULsXp4EuDO+nFbeXB/iKndZynuV Kokirywl2nD2IP0/yncdLQZ8ByIyqP3G82fq/l8p7AsCAwEAAaOBxzCBxDAdBgNV HQ4EFgQUHI2rUXeBjTv1zAllaPGrHFcEK0YwgZQGA1UdIwSBjDCBiYAUHI2rUXeB jTv1zAllaPGrHFcEK0ahZqRkMGIxGDAWBgNVBAMTD2F1dGgwLmF1dGgwLmNvbTES MBAGA1UEChMJQXV0aDAgTExDMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZIIJALr9HwgrQ7GeMAwGA1UdEwQFMAMBAf8w DQYJKoZIhvcNAQEFBQADggEBAFrXIhCy4T4eGrikb0R2wHv/uS548r3pZyBV0CDb cRwAtbnpJMvkGFqKVp4pmyoIDSVNK/j+sLEshB20XftezHZyRJbCUbtKvXQ6Fsxo eZMlN0ITYKTaoBZKhUxxj90otAhNC58qwGUPqt2LewJhHyLucKkGJ1mQ3b5xKZ53 2ToufouH9VLhig3H1KnxWo/zMD6Ke8cCk6qO9htuhI06s3GQGS1QWQtAmm17C6Tf KgDwQFZwhqHUUZnwKRH8gU6OgZsvhgV1B7H5mjZcu57KMiDBekU9MEY0DCVTN3Wk mcTII668zLsJrkNX6PEfck1AMBbVE6pEUKcWwq3uaLvlAUo= -----END CERTIFICATE-----