diff options
Diffstat (limited to 'tests/dpop-proof-no-ath.scm')
-rw-r--r-- | tests/dpop-proof-no-ath.scm | 59 |
1 files changed, 59 insertions, 0 deletions
diff --git a/tests/dpop-proof-no-ath.scm b/tests/dpop-proof-no-ath.scm new file mode 100644 index 0000000..67b8a70 --- /dev/null +++ b/tests/dpop-proof-no-ath.scm @@ -0,0 +1,59 @@ +;; webid-oidc, implementation of the Solid specification +;; Copyright (C) 2021 Vivien Kraus + +;; This program is free software: you can redistribute it and/or modify +;; it under the terms of the GNU Affero General Public License as +;; published by the Free Software Foundation, either version 3 of the +;; License, or (at your option) any later version. + +;; This program is distributed in the hope that it will be useful, +;; but WITHOUT ANY WARRANTY; without even the implied warranty of +;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +;; GNU Affero General Public License for more details. + +;; You should have received a copy of the GNU Affero General Public License +;; along with this program. If not, see <https://www.gnu.org/licenses/>. + +(use-modules (webid-oidc dpop-proof) + (webid-oidc jti) + (webid-oidc jwk) + (webid-oidc testing) + (webid-oidc errors) + (web uri) + (srfi srfi-19) + (web response)) + +(with-test-environment + "dpop-proof-no-ath" + (lambda () + (define jwk (generate-key #:n-size 2048)) + (define cnf (jkt jwk)) + (define blacklist (make-jti-list)) + (define proof + (issue-dpop-proof + jwk + #:alg 'RS256 + #:htm 'GET + #:htu (string->uri "https://example.com/res?query") + #:iat (time-utc->date (make-time time-utc 0 0)))) + (with-exception-handler + (lambda (error) + (let ((cause + ((record-accessor &cannot-decode-dpop-proof 'cause) error))) + (unless (dpop-invalid-access-token-hash? cause) + (raise-exception error)) + (when (dpop-invalid-access-token-hash-hash cause) + ;; An #f value for hash indicates that there was no ath + ;; claim + (exit 1)))) + (lambda () + (dpop-proof-decode (time-utc->date (make-time time-utc 0 10)) + blacklist + 'GET + (string->uri "https://example.com/res?query") + proof + cnf + #:access-token "aaa") + (exit 2)) + #:unwind? #t + #:unwind-for-type &cannot-decode-dpop-proof))) |