def test_compact_rsa(self):
jwe = JWE(algorithms=JWE_ALGORITHMS)
s = jwe.serialize_compact({
'alg': 'RSA-OAEP',
'enc': 'A256GCM'
}, 'hello', read_file_path('rsa_public.pem'))
data = jwe.deserialize_compact(s, read_file_path('rsa_private.pem'))
header, payload = data['header'], data['payload']
self.assertEqual(payload, b'hello')
self.assertEqual(header['alg'], 'RSA-OAEP')
def test_aes_gcm_jwe(self):
jwe = JWE(algorithms=JWE_ALGORITHMS)
sizes = [128, 192, 256]
_enc_choices = [
'A128CBC-HS256', 'A192CBC-HS384', 'A256CBC-HS512',
'A128GCM', 'A192GCM', 'A256GCM'
]
for s in sizes:
alg = 'A{}GCMKW'.format(s)
key = os.urandom(s // 8)
for enc in _enc_choices:
protected = {'alg': alg, 'enc': enc}
data = jwe.serialize_compact(protected, b'hello', key)
rv = jwe.deserialize_compact(data, key)
self.assertEqual(rv['payload'], b'hello')
def test_register_invalid_algorithms(self):
jwe = JWE(algorithms=[])
self.assertRaises(
ValueError,
jwe.register_algorithm,
JWS_ALGORITHMS[0]
)
def test_ase_jwe_invalid_key(self):
jwe = JWE(algorithms=JWE_ALGORITHMS)
protected = {'alg': 'A128KW', 'enc': 'A128GCM'}
self.assertRaises(
ValueError,
jwe.serialize_compact,
protected, b'hello', b'invalid-key'
)
def test_not_enough_segments(self):
s = 'a.b.c'
jwe = JWE(algorithms=JWE_ALGORITHMS)
self.assertRaises(
errors.DecodeError,
jwe.deserialize_compact,
s, None
)
def test_invalid_header(self):
jwe = JWE(algorithms=JWE_ALGORITHMS)
public_key = read_file_path('rsa_public.pem')
self.assertRaises(errors.MissingAlgorithmError, jwe.serialize_compact,
{}, 'a', public_key)
self.assertRaises(errors.UnsupportedAlgorithmError,
jwe.serialize_compact, {'alg': 'invalid'}, 'a',
public_key)
self.assertRaises(errors.MissingEncryptionAlgorithmError,
jwe.serialize_compact, {'alg': 'RSA-OAEP'}, 'a',
public_key)
self.assertRaises(errors.UnsupportedEncryptionAlgorithmError,
jwe.serialize_compact, {
'alg': 'RSA-OAEP',
'enc': 'invalid'
}, 'a', public_key)
self.assertRaises(errors.UnsupportedCompressionAlgorithmError,
jwe.serialize_compact, {
'alg': 'RSA-OAEP',
'enc': 'A256GCM',
'zip': 'invalid'
}, 'a', public_key)