Joe Grandja
4 months ago
8 changed files with 26 additions and 377 deletions
@ -1,114 +0,0 @@
@@ -1,114 +0,0 @@
|
||||
/* |
||||
* Copyright 2004-present the original author or authors. |
||||
* |
||||
* Licensed under the Apache License, Version 2.0 (the "License"); |
||||
* you may not use this file except in compliance with the License. |
||||
* You may obtain a copy of the License at |
||||
* |
||||
* https://www.apache.org/licenses/LICENSE-2.0
|
||||
* |
||||
* Unless required by applicable law or agreed to in writing, software |
||||
* distributed under the License is distributed on an "AS IS" BASIS, |
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||||
* See the License for the specific language governing permissions and |
||||
* limitations under the License. |
||||
*/ |
||||
|
||||
package org.springframework.security.oauth2.jose; |
||||
|
||||
import java.security.KeyPair; |
||||
import java.security.KeyPairGenerator; |
||||
import java.security.interfaces.ECPrivateKey; |
||||
import java.security.interfaces.ECPublicKey; |
||||
import java.security.interfaces.RSAPrivateKey; |
||||
import java.security.interfaces.RSAPublicKey; |
||||
import java.util.UUID; |
||||
|
||||
import javax.crypto.SecretKey; |
||||
|
||||
import com.nimbusds.jose.jwk.Curve; |
||||
import com.nimbusds.jose.jwk.ECKey; |
||||
import com.nimbusds.jose.jwk.KeyUse; |
||||
import com.nimbusds.jose.jwk.OctetSequenceKey; |
||||
import com.nimbusds.jose.jwk.RSAKey; |
||||
|
||||
/** |
||||
* @author Joe Grandja |
||||
*/ |
||||
public final class TestJwks { |
||||
|
||||
private static final KeyPairGenerator rsaKeyPairGenerator; |
||||
static { |
||||
try { |
||||
rsaKeyPairGenerator = KeyPairGenerator.getInstance("RSA"); |
||||
rsaKeyPairGenerator.initialize(2048); |
||||
} |
||||
catch (Exception ex) { |
||||
throw new IllegalStateException(ex); |
||||
} |
||||
} |
||||
|
||||
// @formatter:off
|
||||
public static final RSAKey DEFAULT_RSA_JWK = |
||||
jwk( |
||||
TestKeys.DEFAULT_PUBLIC_KEY, |
||||
TestKeys.DEFAULT_PRIVATE_KEY |
||||
).build(); |
||||
// @formatter:on
|
||||
|
||||
// @formatter:off
|
||||
public static final ECKey DEFAULT_EC_JWK = |
||||
jwk( |
||||
(ECPublicKey) TestKeys.DEFAULT_EC_KEY_PAIR.getPublic(), |
||||
(ECPrivateKey) TestKeys.DEFAULT_EC_KEY_PAIR.getPrivate() |
||||
).build(); |
||||
// @formatter:on
|
||||
|
||||
// @formatter:off
|
||||
public static final OctetSequenceKey DEFAULT_SECRET_JWK = |
||||
jwk( |
||||
TestKeys.DEFAULT_SECRET_KEY |
||||
).build(); |
||||
// @formatter:on
|
||||
|
||||
private TestJwks() { |
||||
} |
||||
|
||||
public static RSAKey.Builder generateRsaJwk() { |
||||
KeyPair keyPair = rsaKeyPairGenerator.generateKeyPair(); |
||||
RSAPublicKey publicKey = (RSAPublicKey) keyPair.getPublic(); |
||||
RSAPrivateKey privateKey = (RSAPrivateKey) keyPair.getPrivate(); |
||||
// @formatter:off
|
||||
return jwk(publicKey, privateKey) |
||||
.keyID(UUID.randomUUID().toString()); |
||||
// @formatter:on
|
||||
} |
||||
|
||||
public static RSAKey.Builder jwk(RSAPublicKey publicKey, RSAPrivateKey privateKey) { |
||||
// @formatter:off
|
||||
return new RSAKey.Builder(publicKey) |
||||
.privateKey(privateKey) |
||||
.keyUse(KeyUse.SIGNATURE) |
||||
.keyID("rsa-jwk-kid"); |
||||
// @formatter:on
|
||||
} |
||||
|
||||
public static ECKey.Builder jwk(ECPublicKey publicKey, ECPrivateKey privateKey) { |
||||
// @formatter:off
|
||||
Curve curve = Curve.forECParameterSpec(publicKey.getParams()); |
||||
return new ECKey.Builder(curve, publicKey) |
||||
.privateKey(privateKey) |
||||
.keyUse(KeyUse.SIGNATURE) |
||||
.keyID("ec-jwk-kid"); |
||||
// @formatter:on
|
||||
} |
||||
|
||||
public static OctetSequenceKey.Builder jwk(SecretKey secretKey) { |
||||
// @formatter:off
|
||||
return new OctetSequenceKey.Builder(secretKey) |
||||
.keyUse(KeyUse.SIGNATURE) |
||||
.keyID("secret-jwk-kid"); |
||||
// @formatter:on
|
||||
} |
||||
|
||||
} |
||||
@ -1,149 +0,0 @@
@@ -1,149 +0,0 @@
|
||||
/* |
||||
* Copyright 2004-present the original author or authors. |
||||
* |
||||
* Licensed under the Apache License, Version 2.0 (the "License"); |
||||
* you may not use this file except in compliance with the License. |
||||
* You may obtain a copy of the License at |
||||
* |
||||
* https://www.apache.org/licenses/LICENSE-2.0
|
||||
* |
||||
* Unless required by applicable law or agreed to in writing, software |
||||
* distributed under the License is distributed on an "AS IS" BASIS, |
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||||
* See the License for the specific language governing permissions and |
||||
* limitations under the License. |
||||
*/ |
||||
|
||||
package org.springframework.security.oauth2.jose; |
||||
|
||||
import java.math.BigInteger; |
||||
import java.security.KeyFactory; |
||||
import java.security.KeyPair; |
||||
import java.security.KeyPairGenerator; |
||||
import java.security.NoSuchAlgorithmException; |
||||
import java.security.interfaces.RSAPrivateKey; |
||||
import java.security.interfaces.RSAPublicKey; |
||||
import java.security.spec.ECFieldFp; |
||||
import java.security.spec.ECParameterSpec; |
||||
import java.security.spec.ECPoint; |
||||
import java.security.spec.EllipticCurve; |
||||
import java.security.spec.InvalidKeySpecException; |
||||
import java.security.spec.PKCS8EncodedKeySpec; |
||||
import java.security.spec.X509EncodedKeySpec; |
||||
import java.util.Base64; |
||||
|
||||
import javax.crypto.SecretKey; |
||||
import javax.crypto.spec.SecretKeySpec; |
||||
|
||||
/** |
||||
* @author Joe Grandja |
||||
*/ |
||||
public final class TestKeys { |
||||
|
||||
public static final KeyFactory kf; |
||||
static { |
||||
try { |
||||
kf = KeyFactory.getInstance("RSA"); |
||||
} |
||||
catch (NoSuchAlgorithmException ex) { |
||||
throw new IllegalStateException(ex); |
||||
} |
||||
} |
||||
public static final String DEFAULT_ENCODED_SECRET_KEY = "bCzY/M48bbkwBEWjmNSIEPfwApcvXOnkCxORBEbPr+4="; |
||||
|
||||
public static final SecretKey DEFAULT_SECRET_KEY = new SecretKeySpec( |
||||
Base64.getDecoder().decode(DEFAULT_ENCODED_SECRET_KEY), "AES"); |
||||
|
||||
// @formatter:off
|
||||
public static final String DEFAULT_RSA_PUBLIC_KEY = "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FlqJr5TRskIQIgdE3Dd" |
||||
+ "7D9lboWdcTUT8a+fJR7MAvQm7XXNoYkm3v7MQL1NYtDvL2l8CAnc0WdSTINU6IRv" |
||||
+ "c5Kqo2Q4csNX9SHOmEfzoROjQqahEcve1jBXluoCXdYuYpx4/1tfRgG6ii4Uhxh6" |
||||
+ "iI8qNMJQX+fLfqhbfYfxBQVRPywBkAbIP4x1EAsbC6FSNmkhCxiMNqEgxaIpY8C2" |
||||
+ "kJdJ/ZIV+WW4noDdzpKqHcwmB8FsrumlVY/DNVvUSDIipiq9PbP4H99TXN1o746o" |
||||
+ "RaNa07rq1hoCgMSSy+85SagCoxlmyE+D+of9SsMY8Ol9t0rdzpobBuhyJ/o5dfvj" |
||||
+ "KwIDAQAB"; |
||||
// @formatter:on
|
||||
|
||||
public static final RSAPublicKey DEFAULT_PUBLIC_KEY; |
||||
static { |
||||
X509EncodedKeySpec spec = new X509EncodedKeySpec(Base64.getDecoder().decode(DEFAULT_RSA_PUBLIC_KEY)); |
||||
try { |
||||
DEFAULT_PUBLIC_KEY = (RSAPublicKey) kf.generatePublic(spec); |
||||
} |
||||
catch (InvalidKeySpecException ex) { |
||||
throw new IllegalArgumentException(ex); |
||||
} |
||||
} |
||||
|
||||
// @formatter:off
|
||||
public static final String DEFAULT_RSA_PRIVATE_KEY = "MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQDcWWomvlNGyQhA" |
||||
+ "iB0TcN3sP2VuhZ1xNRPxr58lHswC9Cbtdc2hiSbe/sxAvU1i0O8vaXwICdzRZ1JM" |
||||
+ "g1TohG9zkqqjZDhyw1f1Ic6YR/OhE6NCpqERy97WMFeW6gJd1i5inHj/W19GAbqK" |
||||
+ "LhSHGHqIjyo0wlBf58t+qFt9h/EFBVE/LAGQBsg/jHUQCxsLoVI2aSELGIw2oSDF" |
||||
+ "oiljwLaQl0n9khX5ZbiegN3OkqodzCYHwWyu6aVVj8M1W9RIMiKmKr09s/gf31Nc" |
||||
+ "3WjvjqhFo1rTuurWGgKAxJLL7zlJqAKjGWbIT4P6h/1Kwxjw6X23St3OmhsG6HIn" |
||||
+ "+jl1++MrAgMBAAECggEBAMf820wop3pyUOwI3aLcaH7YFx5VZMzvqJdNlvpg1jbE" |
||||
+ "E2Sn66b1zPLNfOIxLcBG8x8r9Ody1Bi2Vsqc0/5o3KKfdgHvnxAB3Z3dPh2WCDek" |
||||
+ "lCOVClEVoLzziTuuTdGO5/CWJXdWHcVzIjPxmK34eJXioiLaTYqN3XKqKMdpD0ZG" |
||||
+ "mtNTGvGf+9fQ4i94t0WqIxpMpGt7NM4RHy3+Onggev0zLiDANC23mWrTsUgect/7" |
||||
+ "62TYg8g1bKwLAb9wCBT+BiOuCc2wrArRLOJgUkj/F4/gtrR9ima34SvWUyoUaKA0" |
||||
+ "bi4YBX9l8oJwFGHbU9uFGEMnH0T/V0KtIB7qetReywkCgYEA9cFyfBIQrYISV/OA" |
||||
+ "+Z0bo3vh2aL0QgKrSXZ924cLt7itQAHNZ2ya+e3JRlTczi5mnWfjPWZ6eJB/8MlH" |
||||
+ "Gpn12o/POEkU+XjZZSPe1RWGt5g0S3lWqyx9toCS9ACXcN9tGbaqcFSVI73zVTRA" |
||||
+ "8J9grR0fbGn7jaTlTX2tnlOTQ60CgYEA5YjYpEq4L8UUMFkuj+BsS3u0oEBnzuHd" |
||||
+ "I9LEHmN+CMPosvabQu5wkJXLuqo2TxRnAznsA8R3pCLkdPGoWMCiWRAsCn979TdY" |
||||
+ "QbqO2qvBAD2Q19GtY7lIu6C35/enQWzJUMQE3WW0OvjLzZ0l/9mA2FBRR+3F9A1d" |
||||
+ "rBdnmv0c3TcCgYEAi2i+ggVZcqPbtgrLOk5WVGo9F1GqUBvlgNn30WWNTx4zIaEk" |
||||
+ "HSxtyaOLTxtq2odV7Kr3LGiKxwPpn/T+Ief+oIp92YcTn+VfJVGw4Z3BezqbR8lA" |
||||
+ "Uf/+HF5ZfpMrVXtZD4Igs3I33Duv4sCuqhEvLWTc44pHifVloozNxYfRfU0CgYBN" |
||||
+ "HXa7a6cJ1Yp829l62QlJKtx6Ymj95oAnQu5Ez2ROiZMqXRO4nucOjGUP55Orac1a" |
||||
+ "FiGm+mC/skFS0MWgW8evaHGDbWU180wheQ35hW6oKAb7myRHtr4q20ouEtQMdQIF" |
||||
+ "snV39G1iyqeeAsf7dxWElydXpRi2b68i3BIgzhzebQKBgQCdUQuTsqV9y/JFpu6H" |
||||
+ "c5TVvhG/ubfBspI5DhQqIGijnVBzFT//UfIYMSKJo75qqBEyP2EJSmCsunWsAFsM" |
||||
+ "TszuiGTkrKcZy9G0wJqPztZZl2F2+bJgnA6nBEV7g5PA4Af+QSmaIhRwqGDAuROR" |
||||
+ "47jndeyIaMTNETEmOnms+as17g=="; |
||||
// @formatter:on
|
||||
|
||||
public static final RSAPrivateKey DEFAULT_PRIVATE_KEY; |
||||
static { |
||||
PKCS8EncodedKeySpec spec = new PKCS8EncodedKeySpec(Base64.getDecoder().decode(DEFAULT_RSA_PRIVATE_KEY)); |
||||
try { |
||||
DEFAULT_PRIVATE_KEY = (RSAPrivateKey) kf.generatePrivate(spec); |
||||
} |
||||
catch (InvalidKeySpecException ex) { |
||||
throw new IllegalArgumentException(ex); |
||||
} |
||||
} |
||||
|
||||
public static final KeyPair DEFAULT_RSA_KEY_PAIR = new KeyPair(DEFAULT_PUBLIC_KEY, DEFAULT_PRIVATE_KEY); |
||||
|
||||
public static final KeyPair DEFAULT_EC_KEY_PAIR = generateEcKeyPair(); |
||||
|
||||
static KeyPair generateEcKeyPair() { |
||||
EllipticCurve ellipticCurve = new EllipticCurve( |
||||
new ECFieldFp(new BigInteger( |
||||
"115792089210356248762697446949407573530086143415290314195533631308867097853951")), |
||||
new BigInteger("115792089210356248762697446949407573530086143415290314195533631308867097853948"), |
||||
new BigInteger("41058363725152142129326129780047268409114441015993725554835256314039467401291")); |
||||
ECPoint ecPoint = new ECPoint( |
||||
new BigInteger("48439561293906451759052585252797914202762949526041747995844080717082404635286"), |
||||
new BigInteger("36134250956749795798585127919587881956611106672985015071877198253568414405109")); |
||||
ECParameterSpec ecParameterSpec = new ECParameterSpec(ellipticCurve, ecPoint, |
||||
new BigInteger("115792089210356248762697446949407573529996955224135760342422259061068512044369"), 1); |
||||
|
||||
KeyPair keyPair; |
||||
try { |
||||
KeyPairGenerator keyPairGenerator = KeyPairGenerator.getInstance("EC"); |
||||
keyPairGenerator.initialize(ecParameterSpec); |
||||
keyPair = keyPairGenerator.generateKeyPair(); |
||||
} |
||||
catch (Exception ex) { |
||||
throw new IllegalStateException(ex); |
||||
} |
||||
return keyPair; |
||||
} |
||||
|
||||
private TestKeys() { |
||||
} |
||||
|
||||
} |
||||
@ -1,61 +0,0 @@
@@ -1,61 +0,0 @@
|
||||
/* |
||||
* Copyright 2004-present the original author or authors. |
||||
* |
||||
* Licensed under the Apache License, Version 2.0 (the "License"); |
||||
* you may not use this file except in compliance with the License. |
||||
* You may obtain a copy of the License at |
||||
* |
||||
* https://www.apache.org/licenses/LICENSE-2.0
|
||||
* |
||||
* Unless required by applicable law or agreed to in writing, software |
||||
* distributed under the License is distributed on an "AS IS" BASIS, |
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||||
* See the License for the specific language governing permissions and |
||||
* limitations under the License. |
||||
*/ |
||||
|
||||
package org.springframework.security.oauth2.jwt; |
||||
|
||||
import java.util.Arrays; |
||||
import java.util.HashMap; |
||||
import java.util.Map; |
||||
|
||||
import org.springframework.security.oauth2.jose.jws.SignatureAlgorithm; |
||||
|
||||
/** |
||||
* @author Joe Grandja |
||||
*/ |
||||
public final class TestJwsHeaders { |
||||
|
||||
private TestJwsHeaders() { |
||||
} |
||||
|
||||
public static JwsHeader.Builder jwsHeader() { |
||||
return jwsHeader(SignatureAlgorithm.RS256); |
||||
} |
||||
|
||||
public static JwsHeader.Builder jwsHeader(SignatureAlgorithm signatureAlgorithm) { |
||||
// @formatter:off
|
||||
return JwsHeader.with(signatureAlgorithm) |
||||
.jwkSetUrl("https://provider.com/oauth2/jwks") |
||||
.jwk(rsaJwk()) |
||||
.keyId("keyId") |
||||
.x509Url("https://provider.com/oauth2/x509") |
||||
.x509CertificateChain(Arrays.asList("x509Cert1", "x509Cert2")) |
||||
.x509SHA1Thumbprint("x509SHA1Thumbprint") |
||||
.x509SHA256Thumbprint("x509SHA256Thumbprint") |
||||
.type("JWT") |
||||
.contentType("jwt-content-type") |
||||
.header("custom-header-name", "custom-header-value"); |
||||
// @formatter:on
|
||||
} |
||||
|
||||
private static Map<String, Object> rsaJwk() { |
||||
Map<String, Object> rsaJwk = new HashMap<>(); |
||||
rsaJwk.put("kty", "RSA"); |
||||
rsaJwk.put("n", "modulus"); |
||||
rsaJwk.put("e", "exponent"); |
||||
return rsaJwk; |
||||
} |
||||
|
||||
} |
||||
@ -1,49 +0,0 @@
@@ -1,49 +0,0 @@
|
||||
/* |
||||
* Copyright 2004-present the original author or authors. |
||||
* |
||||
* Licensed under the Apache License, Version 2.0 (the "License"); |
||||
* you may not use this file except in compliance with the License. |
||||
* You may obtain a copy of the License at |
||||
* |
||||
* https://www.apache.org/licenses/LICENSE-2.0
|
||||
* |
||||
* Unless required by applicable law or agreed to in writing, software |
||||
* distributed under the License is distributed on an "AS IS" BASIS, |
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||||
* See the License for the specific language governing permissions and |
||||
* limitations under the License. |
||||
*/ |
||||
|
||||
package org.springframework.security.oauth2.jwt; |
||||
|
||||
import java.time.Instant; |
||||
import java.time.temporal.ChronoUnit; |
||||
import java.util.Collections; |
||||
|
||||
/** |
||||
* @author Joe Grandja |
||||
*/ |
||||
public final class TestJwtClaimsSets { |
||||
|
||||
private TestJwtClaimsSets() { |
||||
} |
||||
|
||||
public static JwtClaimsSet.Builder jwtClaimsSet() { |
||||
String issuer = "https://provider.com"; |
||||
Instant issuedAt = Instant.now(); |
||||
Instant expiresAt = issuedAt.plus(1, ChronoUnit.HOURS); |
||||
|
||||
// @formatter:off
|
||||
return JwtClaimsSet.builder() |
||||
.issuer(issuer) |
||||
.subject("subject") |
||||
.audience(Collections.singletonList("client-1")) |
||||
.issuedAt(issuedAt) |
||||
.notBefore(issuedAt) |
||||
.expiresAt(expiresAt) |
||||
.id("jti") |
||||
.claim("custom-claim-name", "custom-claim-value"); |
||||
// @formatter:on
|
||||
} |
||||
|
||||
} |
||||
Loading…
Reference in new issue