Add tests to oauth2-jose

Fixes gh-4806

oauth2/oauth2-jose/src/test/java/org/springframework/security/oauth2/jwt/JwtTests.java

@@ -0,0 +1,113 @@
+/*
+ * Copyright 2002-2017 the original author or authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.springframework.security.oauth2.jwt;
+
+import org.junit.Test;
+import org.springframework.security.oauth2.jose.jws.JwsAlgorithms;
+
+import java.time.Instant;
+import java.util.Arrays;
+import java.util.Collections;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+/**
+ * Tests for {@link Jwt}.
+ *
+ * @author Joe Grandja
+ */
+public class JwtTests {
+	private static final String ISS_CLAIM = "iss";
+	private static final String SUB_CLAIM = "sub";
+	private static final String AUD_CLAIM = "aud";
+	private static final String EXP_CLAIM = "exp";
+	private static final String NBF_CLAIM = "nbf";
+	private static final String IAT_CLAIM = "iat";
+	private static final String JTI_CLAIM = "jti";
+
+	private static final String ISS_VALUE = "https://provider.com";
+	private static final String SUB_VALUE = "subject1";
+	private static final List<String> AUD_VALUE = Arrays.asList("aud1", "aud2");
+	private static final long EXP_VALUE = Instant.now().plusSeconds(60).toEpochMilli();
+	private static final long NBF_VALUE = Instant.now().plusSeconds(5).toEpochMilli();
+	private static final long IAT_VALUE = Instant.now().toEpochMilli();
+	private static final String JTI_VALUE = "jwt-id-1";
+
+	private static final Map<String, Object> HEADERS;
+	private static final Map<String, Object> CLAIMS;
+	private static final String JWT_TOKEN_VALUE = "jwt-token-value";
+
+	static {
+		HEADERS = new HashMap<>();
+		HEADERS.put("alg", JwsAlgorithms.RS256);
+
+		CLAIMS = new HashMap<>();
+		CLAIMS.put(ISS_CLAIM, ISS_VALUE);
+		CLAIMS.put(SUB_CLAIM, SUB_VALUE);
+		CLAIMS.put(AUD_CLAIM, AUD_VALUE);
+		CLAIMS.put(EXP_CLAIM, EXP_VALUE);
+		CLAIMS.put(NBF_CLAIM, NBF_VALUE);
+		CLAIMS.put(IAT_CLAIM, IAT_VALUE);
+		CLAIMS.put(JTI_CLAIM, JTI_VALUE);
+	}
+
+	@Test(expected = IllegalArgumentException.class)
+	public void constructorWhenTokenValueIsNullThenThrowIllegalArgumentException() {
+		new Jwt(null, Instant.ofEpochMilli(IAT_VALUE), Instant.ofEpochMilli(EXP_VALUE), HEADERS, CLAIMS);
+	}
+
+	@Test(expected = IllegalArgumentException.class)
+	public void constructorWhenIssuedAtIsNullThenThrowIllegalArgumentException() {
+		new Jwt(JWT_TOKEN_VALUE, null, Instant.ofEpochMilli(EXP_VALUE), HEADERS, CLAIMS);
+	}
+
+	@Test(expected = IllegalArgumentException.class)
+	public void constructorWhenExpiresAtIsNullThenThrowIllegalArgumentException() {
+		new Jwt(JWT_TOKEN_VALUE, Instant.ofEpochMilli(IAT_VALUE), null, HEADERS, CLAIMS);
+	}
+
+	@Test(expected = IllegalArgumentException.class)
+	public void constructorWhenHeadersIsEmptyThenThrowIllegalArgumentException() {
+		new Jwt(JWT_TOKEN_VALUE, Instant.ofEpochMilli(IAT_VALUE),
+			Instant.ofEpochMilli(EXP_VALUE), Collections.emptyMap(), CLAIMS);
+	}
+
+	@Test(expected = IllegalArgumentException.class)
+	public void constructorWhenClaimsIsEmptyThenThrowIllegalArgumentException() {
+		new Jwt(JWT_TOKEN_VALUE, Instant.ofEpochMilli(IAT_VALUE),
+			Instant.ofEpochMilli(EXP_VALUE), HEADERS, Collections.emptyMap());
+	}
+
+	@Test
+	public void constructorWhenParametersProvidedAndValidThenCreated() {
+		Jwt jwt = new Jwt(JWT_TOKEN_VALUE, Instant.ofEpochMilli(IAT_VALUE),
+			Instant.ofEpochMilli(EXP_VALUE), HEADERS, CLAIMS);
+
+		assertThat(jwt.getTokenValue()).isEqualTo(JWT_TOKEN_VALUE);
+		assertThat(jwt.getHeaders()).isEqualTo(HEADERS);
+		assertThat(jwt.getClaims()).isEqualTo(CLAIMS);
+		assertThat(jwt.getIssuer().toString()).isEqualTo(ISS_VALUE);
+		assertThat(jwt.getSubject()).isEqualTo(SUB_VALUE);
+		assertThat(jwt.getAudience()).isEqualTo(AUD_VALUE);
+		assertThat(jwt.getExpiresAt().toEpochMilli()).isEqualTo(EXP_VALUE);
+		assertThat(jwt.getNotBefore().toEpochMilli()).isEqualTo(NBF_VALUE);
+		assertThat(jwt.getIssuedAt().toEpochMilli()).isEqualTo(IAT_VALUE);
+		assertThat(jwt.getId()).isEqualTo(JTI_VALUE);
+	}
+}

oauth2/oauth2-jose/src/test/java/org/springframework/security/oauth2/jwt/NimbusJwtDecoderJwkSupportTests.java

@@ -0,0 +1,50 @@
+/*
+ * Copyright 2002-2017 the original author or authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.springframework.security.oauth2.jwt;
+
+import org.junit.Test;
+import org.springframework.security.oauth2.jose.jws.JwsAlgorithms;
+
+/**
+ * Tests for {@link NimbusJwtDecoderJwkSupport}.
+ *
+ * @author Joe Grandja
+ */
+public class NimbusJwtDecoderJwkSupportTests {
+	private static final String JWK_SET_URL = "https://provider.com/oauth2/keys";
+	private static final String JWS_ALGORITHM = JwsAlgorithms.RS256;
+
+	@Test(expected = IllegalArgumentException.class)
+	public void constructorWhenJwkSetUrlIsNullThenThrowIllegalArgumentException() {
+		new NimbusJwtDecoderJwkSupport(null);
+	}
+
+	@Test(expected = IllegalArgumentException.class)
+	public void constructorWhenJwkSetUrlInvalidThenThrowIllegalArgumentException() {
+		new NimbusJwtDecoderJwkSupport("invalid.com");
+	}
+
+	@Test(expected = IllegalArgumentException.class)
+	public void constructorWhenJwsAlgorithmIsNullThenThrowIllegalArgumentException() {
+		new NimbusJwtDecoderJwkSupport(JWK_SET_URL, null);
+	}
+
+	@Test(expected = JwtException.class)
+	public void decodeWhenJwtInvalidThenThrowJwtException() {
+		NimbusJwtDecoderJwkSupport jwtDecoder = new NimbusJwtDecoderJwkSupport(JWK_SET_URL, JWS_ALGORITHM);
+		jwtDecoder.decode("invalid");
+	}
+}