Example #1
0
def test_get_verify_keys_matching_kid():
    msg = Message()
    a_kids = [k.kid for k in KEYJARS["A"].get_verify_key(owner="A", key_type="RSA")]
    header = {"alg": "RS256", "kid": a_kids[0]}
    keys = []  # type: ignore
    msg.get_verify_keys(KEYJARS["A"], keys, {"iss": "A"}, header, {})
    assert len(keys) == 1
    assert keys[0].kid == a_kids[0]
Example #2
0
def test_get_verify_keys_matching_kid():
    msg = Message()
    a_kids = [k.kid for k in
              KEYJARS['A'].get_verify_key(owner='A', key_type='RSA')]
    header = {'alg': 'RS256', 'kid': a_kids[0]}
    keys = []
    msg.get_verify_keys(KEYJARS['A'], keys, {'iss': 'A'}, header, {})
    assert len(keys) == 1
    assert keys[0].kid == a_kids[0]
Example #3
0
def test_get_verify_keys_matching_kid():
    msg = Message()
    a_kids = [k.kid for k in
              KEYJARS['A'].get_verify_key(owner='A', key_type='RSA')]
    header = {'alg': 'RS256', 'kid': a_kids[0]}
    keys = []
    msg.get_verify_keys(KEYJARS['A'], keys, {'iss': 'A'}, header, {})
    assert len(keys) == 1
    assert keys[0].kid == a_kids[0]
Example #4
0
def test_get_verify_keys_no_kid_multiple_keys_no_kid_issuer():
    msg = Message()
    header = {'alg': 'RS256'}
    keys = []

    a_kids = [k.kid for k in
              KEYJARS['A'].get_verify_key(owner='A', key_type='RSA')]
    no_kid_issuer = {'A': a_kids}

    msg.get_verify_keys(KEYJARS['A'], keys, {'iss': 'A'}, header, {},
                        no_kid_issuer=no_kid_issuer)
    assert len(keys) == 3
    assert set([k.kid for k in keys]) == set(a_kids)
Example #5
0
def test_get_verify_keys_no_kid_multiple_keys_no_kid_issuer():
    msg = Message()
    header = {'alg': 'RS256'}
    keys = []

    a_kids = [k.kid for k in
              KEYJARS['A'].get_verify_key(owner='A', key_type='RSA')]
    no_kid_issuer = {'A': a_kids}

    msg.get_verify_keys(KEYJARS['A'], keys, {'iss': 'A'}, header, {},
                        no_kid_issuer=no_kid_issuer)
    assert len(keys) == 3
    assert set([k.kid for k in keys]) == set(a_kids)
Example #6
0
def test_get_verify_keys_no_kid_multiple_keys_no_kid_issuer():
    msg = Message()
    header = {"alg": "RS256"}
    keys = []  # type: ignore

    a_kids = [k.kid for k in KEYJARS["A"].get_verify_key(owner="A", key_type="RSA")]
    no_kid_issuer = {"A": a_kids}

    msg.get_verify_keys(
        KEYJARS["A"], keys, {"iss": "A"}, header, {}, no_kid_issuer=no_kid_issuer
    )
    assert len(keys) == 3
    assert set([k.kid for k in keys]) == set(a_kids)
Example #7
0
def test_get_verify_keys_no_kid_multiple_keys_no_kid_issuer_lim():
    msg = Message()
    header = {'alg': 'RS256'}
    keys = []  # type: ignore

    a_kids = [k.kid for k in
              KEYJARS['A'].get_verify_key(owner='A', key_type='RSA')]
    # get rid of one kid
    a_kids = a_kids[:-1]
    no_kid_issuer = {'A': a_kids}

    msg.get_verify_keys(KEYJARS['A'], keys, {'iss': 'A'}, header, {},
                        no_kid_issuer=no_kid_issuer)
    assert len(keys) == 2
    assert set([k.kid for k in keys]) == set(a_kids)
Example #8
0
def test_get_verify_keys_no_matching_kid():
    msg = Message()
    header = {'alg': 'RS256', 'kid': 'aaaaaaa'}
    keys = []
    msg.get_verify_keys(KEYJARS['A'], keys, {'iss': 'A'}, header, {})
    assert keys == []
Example #9
0
def test_get_verify_keys_no_kid_single_key():
    msg = Message()
    header = {'alg': 'RS256'}
    keys = []
    msg.get_verify_keys(IKEYJAR, keys, {'iss': 'issuer'}, header, {})
    assert len(keys) == 1
Example #10
0
def test_get_verify_keys_no_kid_multiple_keys():
    msg = Message()
    header = {'alg': 'RS256'}
    keys = []
    msg.get_verify_keys(KEYJARS['A'], keys, {'iss': 'A'}, header, {})
    assert keys == []
Example #11
0
def test_get_verify_keys_no_matching_kid():
    msg = Message()
    header = {"alg": "RS256", "kid": "aaaaaaa"}
    keys = []  # type: ignore
    msg.get_verify_keys(KEYJARS["A"], keys, {"iss": "A"}, header, {})
    assert keys == []
Example #12
0
def test_get_verify_keys_no_kid_single_key():
    msg = Message()
    header = {"alg": "RS256"}
    keys = []  # type: ignore
    msg.get_verify_keys(IKEYJAR, keys, {"iss": "issuer"}, header, {})
    assert len(keys) == 1
Example #13
0
def test_get_verify_keys_no_kid_multiple_keys():
    msg = Message()
    header = {"alg": "RS256"}
    keys = []  # type: ignore
    msg.get_verify_keys(KEYJARS["A"], keys, {"iss": "A"}, header, {})
    assert keys == []
Example #14
0
def test_get_verify_keys_no_matching_kid():
    msg = Message()
    header = {'alg': 'RS256', 'kid': 'aaaaaaa'}
    keys = []
    msg.get_verify_keys(KEYJARS['A'], keys, {'iss': 'A'}, header, {})
    assert keys == []
Example #15
0
def test_get_verify_keys_no_kid_single_key():
    msg = Message()
    header = {'alg': 'RS256'}
    keys = []
    msg.get_verify_keys(IKEYJAR, keys, {'iss': 'issuer'}, header, {})
    assert len(keys) == 1
Example #16
0
def test_get_verify_keys_no_kid_multiple_keys():
    msg = Message()
    header = {'alg': 'RS256'}
    keys = []
    msg.get_verify_keys(KEYJARS['A'], keys, {'iss': 'A'}, header, {})
    assert keys == []