summaryrefslogtreecommitdiff
path: root/tests/dpop-proof-wrong-htm.scm
blob: 1b301610af5e4617434d828332f32f849ed5bea3 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
;; webid-oidc, implementation of the Solid specification
;; Copyright (C) 2020, 2021  Vivien Kraus

;; This program is free software: you can redistribute it and/or modify
;; it under the terms of the GNU Affero General Public License as
;; published by the Free Software Foundation, either version 3 of the
;; License, or (at your option) any later version.

;; This program is distributed in the hope that it will be useful,
;; but WITHOUT ANY WARRANTY; without even the implied warranty of
;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;; GNU Affero General Public License for more details.

;; You should have received a copy of the GNU Affero General Public License
;; along with this program.  If not, see <https://www.gnu.org/licenses/>.

(use-modules (webid-oidc dpop-proof)
             (webid-oidc jti)
             (webid-oidc jwk)
             (webid-oidc testing)
             (webid-oidc errors)
             ((webid-oidc parameters) #:prefix p:)
             (web uri)
             (srfi srfi-19)
             (web response))

(with-test-environment
 "dpop-proof-wrong-htm"
 (lambda ()
   (define jwk (generate-key #:n-size 2048))
   (define cnf (jkt jwk))
   (define proof
     (parameterize ((p:current-date 0))
       (issue-dpop-proof
        jwk
        #:alg 'RS256
        #:htm 'POST
        #:htu (string->uri "https://example.com/res#frag"))))
   (with-exception-handler
       (lambda (error)
         (unless ((record-predicate &dpop-method-mismatch)
                  ((record-accessor &cannot-decode-dpop-proof 'cause) error))
           (raise-exception error)))
     (lambda ()
       (parameterize ((p:current-date 10))
         (dpop-proof-decode 'GET
                            (string->uri "https://example.com/res?query")
                            proof
                            cnf))
       (exit 2))
     #:unwind? #t
     #:unwind-for-type &cannot-decode-dpop-proof)))