mirror of
https://gitlab.com/pulsechaincom/prysm-pulse.git
synced 2024-12-25 12:57:18 +00:00
a3cc26dd2a
* Replace deprecated StandardClaims with RegisteredClaims. * Replace deprecated StandardClaims with RegisteredClaims. Co-authored-by: Raul Jordan <raul@prysmaticlabs.com>
70 lines
1.8 KiB
Go
70 lines
1.8 KiB
Go
package rpc
|
|
|
|
import (
|
|
"context"
|
|
"testing"
|
|
|
|
"github.com/golang-jwt/jwt/v4"
|
|
"github.com/prysmaticlabs/prysm/v3/testing/require"
|
|
"google.golang.org/grpc"
|
|
"google.golang.org/grpc/metadata"
|
|
)
|
|
|
|
func TestServer_JWTInterceptor_Verify(t *testing.T) {
|
|
s := Server{
|
|
jwtSecret: []byte("testKey"),
|
|
}
|
|
interceptor := s.JWTInterceptor()
|
|
|
|
unaryInfo := &grpc.UnaryServerInfo{
|
|
FullMethod: "Proto.CreateWallet",
|
|
}
|
|
unaryHandler := func(ctx context.Context, req interface{}) (interface{}, error) {
|
|
return nil, nil
|
|
}
|
|
token, err := createTokenString(s.jwtSecret)
|
|
require.NoError(t, err)
|
|
ctxMD := map[string][]string{
|
|
"authorization": {"Bearer " + token},
|
|
}
|
|
ctx := context.Background()
|
|
ctx = metadata.NewIncomingContext(ctx, ctxMD)
|
|
_, err = interceptor(ctx, "xyz", unaryInfo, unaryHandler)
|
|
require.NoError(t, err)
|
|
}
|
|
|
|
func TestServer_JWTInterceptor_BadToken(t *testing.T) {
|
|
s := Server{
|
|
jwtSecret: []byte("testKey"),
|
|
}
|
|
interceptor := s.JWTInterceptor()
|
|
|
|
unaryInfo := &grpc.UnaryServerInfo{
|
|
FullMethod: "Proto.CreateWallet",
|
|
}
|
|
unaryHandler := func(ctx context.Context, req interface{}) (interface{}, error) {
|
|
return nil, nil
|
|
}
|
|
|
|
badServer := Server{
|
|
jwtSecret: []byte("badTestKey"),
|
|
}
|
|
token, err := createTokenString(badServer.jwtSecret)
|
|
require.NoError(t, err)
|
|
ctxMD := map[string][]string{
|
|
"authorization": {"Bearer " + token},
|
|
}
|
|
ctx := context.Background()
|
|
ctx = metadata.NewIncomingContext(ctx, ctxMD)
|
|
_, err = interceptor(ctx, "xyz", unaryInfo, unaryHandler)
|
|
require.ErrorContains(t, "signature is invalid", err)
|
|
}
|
|
|
|
func TestServer_JWTInterceptor_InvalidSigningType(t *testing.T) {
|
|
ss := &Server{jwtSecret: make([]byte, 32)}
|
|
// Use a different signing type than the expected, HMAC.
|
|
token := jwt.NewWithClaims(jwt.SigningMethodRS256, jwt.RegisteredClaims{})
|
|
_, err := ss.validateJWT(token)
|
|
require.ErrorContains(t, "unexpected JWT signing method", err)
|
|
}
|