;; webid-oidc, implementation of the Solid specification
;; Copyright (C) 2020, 2021  Vivien Kraus

;; This program is free software: you can redistribute it and/or modify
;; it under the terms of the GNU Affero General Public License as
;; published by the Free Software Foundation, either version 3 of the
;; License, or (at your option) any later version.

;; This program is distributed in the hope that it will be useful,
;; but WITHOUT ANY WARRANTY; without even the implied warranty of
;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;; GNU Affero General Public License for more details.

;; You should have received a copy of the GNU Affero General Public License
;; along with this program.  If not, see <https://www.gnu.org/licenses/>.

(use-modules (webid-oidc dpop-proof)
             (webid-oidc jti)
             (webid-oidc jwk)
             (webid-oidc testing)
             (webid-oidc errors)
             ((webid-oidc parameters) #:prefix p:)
             (web uri)
             (srfi srfi-19)
             (web response))

(with-test-environment
 "dpop-proof-wrong-key"
 (lambda ()
   (define jwk (generate-key #:n-size 2048))
   (define cnf (jkt (generate-key #:n-size 2048)))
   (define proof
     (parameterize ((p:current-date 0))
       (issue-dpop-proof
        jwk
        #:alg 'RS256
        #:htm 'GET
        #:htu (string->uri "https://example.com/res#frag"))))
   (with-exception-handler
       (lambda (error)
         (unless ((record-predicate &dpop-unconfirmed-key)
                  ((record-accessor &cannot-decode-dpop-proof 'cause) error))
           (raise-exception error)))
     (lambda ()
       (parameterize ((p:current-date 10))
         (dpop-proof-decode 'GET
                            (string->uri "https://example.com/res?query")
                            proof
                            cnf))
       (exit 2))
     #:unwind? #t
     #:unwind-for-type &cannot-decode-dpop-proof)))