mirror of
https://gitlab.com/pulsechaincom/prysm-pulse.git
synced 2024-12-26 13:18:57 +00:00
f3a7f399c0
* round tripper with claims * auth * edit auth * test out jwt * passing * jwt flag * comment * passing * commentary * fix up jwt parsing * gaz * update jwt libs * tidy * gaz * lint * tidy up * comment too long Co-authored-by: james-prysm <90280386+james-prysm@users.noreply.github.com>
70 lines
1.8 KiB
Go
70 lines
1.8 KiB
Go
package rpc
|
|
|
|
import (
|
|
"context"
|
|
"testing"
|
|
|
|
"github.com/golang-jwt/jwt/v4"
|
|
"github.com/prysmaticlabs/prysm/testing/require"
|
|
"google.golang.org/grpc"
|
|
"google.golang.org/grpc/metadata"
|
|
)
|
|
|
|
func TestServer_JWTInterceptor_Verify(t *testing.T) {
|
|
s := Server{
|
|
jwtSecret: []byte("testKey"),
|
|
}
|
|
interceptor := s.JWTInterceptor()
|
|
|
|
unaryInfo := &grpc.UnaryServerInfo{
|
|
FullMethod: "Proto.CreateWallet",
|
|
}
|
|
unaryHandler := func(ctx context.Context, req interface{}) (interface{}, error) {
|
|
return nil, nil
|
|
}
|
|
token, err := createTokenString(s.jwtSecret)
|
|
require.NoError(t, err)
|
|
ctxMD := map[string][]string{
|
|
"authorization": {"Bearer " + token},
|
|
}
|
|
ctx := context.Background()
|
|
ctx = metadata.NewIncomingContext(ctx, ctxMD)
|
|
_, err = interceptor(ctx, "xyz", unaryInfo, unaryHandler)
|
|
require.NoError(t, err)
|
|
}
|
|
|
|
func TestServer_JWTInterceptor_BadToken(t *testing.T) {
|
|
s := Server{
|
|
jwtSecret: []byte("testKey"),
|
|
}
|
|
interceptor := s.JWTInterceptor()
|
|
|
|
unaryInfo := &grpc.UnaryServerInfo{
|
|
FullMethod: "Proto.CreateWallet",
|
|
}
|
|
unaryHandler := func(ctx context.Context, req interface{}) (interface{}, error) {
|
|
return nil, nil
|
|
}
|
|
|
|
badServer := Server{
|
|
jwtSecret: []byte("badTestKey"),
|
|
}
|
|
token, err := createTokenString(badServer.jwtSecret)
|
|
require.NoError(t, err)
|
|
ctxMD := map[string][]string{
|
|
"authorization": {"Bearer " + token},
|
|
}
|
|
ctx := context.Background()
|
|
ctx = metadata.NewIncomingContext(ctx, ctxMD)
|
|
_, err = interceptor(ctx, "xyz", unaryInfo, unaryHandler)
|
|
require.ErrorContains(t, "signature is invalid", err)
|
|
}
|
|
|
|
func TestServer_JWTInterceptor_InvalidSigningType(t *testing.T) {
|
|
ss := &Server{jwtSecret: make([]byte, 32)}
|
|
// Use a different signing type than the expected, HMAC.
|
|
token := jwt.NewWithClaims(jwt.SigningMethodRS256, jwt.StandardClaims{})
|
|
_, err := ss.validateJWT(token)
|
|
require.ErrorContains(t, "unexpected JWT signing method", err)
|
|
}
|