1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
|
# -*- coding: utf-8 -*-
import mock
import time
from oauthlib.common import Request
from oauthlib.openid.connect.core.grant_types.base import GrantTypeBase
from tests.unittest import TestCase
class GrantBase(GrantTypeBase):
"""Class to test GrantTypeBase"""
def __init__(self, request_validator=None, **kwargs):
self.request_validator = request_validator
class IDTokenTest(TestCase):
def setUp(self):
self.request = Request('http://a.b/path')
self.request.scopes = ('hello', 'openid')
self.request.expires_in = 1800
self.request.client_id = 'abcdef'
self.request.code = '1234'
self.request.response_type = 'id_token'
self.request.grant_type = 'authorization_code'
self.request.redirect_uri = 'https://a.b/cb'
self.request.state = 'abc'
self.request.nonce = None
self.mock_validator = mock.MagicMock()
self.mock_validator.get_id_token.return_value = None
self.mock_validator.finalize_id_token.return_value = "eyJ.body.signature"
self.token = {}
self.grant = GrantBase(request_validator=self.mock_validator)
self.url_query = 'https://a.b/cb?code=abc&state=abc'
self.url_fragment = 'https://a.b/cb#code=abc&state=abc'
def test_id_token_hash(self):
self.assertEqual(self.grant.id_token_hash(
"Qcb0Orv1zh30vL1MPRsbm-diHiMwcLyZvn1arpZv-Jxf_11jnpEX3Tgfvk",
), "LDktKdoQak3Pk0cnXxCltA", "hash differs from RFC")
def test_get_id_token_no_openid(self):
self.request.scopes = ('hello')
token = self.grant.add_id_token(self.token, "token_handler_mock", self.request)
self.assertNotIn("id_token", token)
self.request.scopes = None
token = self.grant.add_id_token(self.token, "token_handler_mock", self.request)
self.assertNotIn("id_token", token)
self.request.scopes = ()
token = self.grant.add_id_token(self.token, "token_handler_mock", self.request)
self.assertNotIn("id_token", token)
def test_get_id_token(self):
self.mock_validator.get_id_token.return_value = "toto"
token = self.grant.add_id_token(self.token, "token_handler_mock", self.request)
self.assertIn("id_token", token)
self.assertEqual(token["id_token"], "toto")
def test_finalize_id_token(self):
token = self.grant.add_id_token(self.token, "token_handler_mock", self.request)
self.assertIn("id_token", token)
self.assertEqual(token["id_token"], "eyJ.body.signature")
id_token = self.mock_validator.finalize_id_token.call_args[0][0]
self.assertEqual(id_token['aud'], 'abcdef')
self.assertGreaterEqual(id_token['iat'], int(time.time()))
def test_finalize_id_token_with_nonce(self):
token = self.grant.add_id_token(self.token, "token_handler_mock", self.request, "my_nonce")
self.assertIn("id_token", token)
self.assertEqual(token["id_token"], "eyJ.body.signature")
id_token = self.mock_validator.finalize_id_token.call_args[0][0]
self.assertEqual(id_token['nonce'], 'my_nonce')
def test_finalize_id_token_with_at_hash(self):
self.token["access_token"] = "Qcb0Orv1zh30vL1MPRsbm-diHiMwcLyZvn1arpZv-Jxf_11jnpEX3Tgfvk"
token = self.grant.add_id_token(self.token, "token_handler_mock", self.request)
self.assertIn("id_token", token)
self.assertEqual(token["id_token"], "eyJ.body.signature")
id_token = self.mock_validator.finalize_id_token.call_args[0][0]
self.assertEqual(id_token['at_hash'], 'LDktKdoQak3Pk0cnXxCltA')
def test_finalize_id_token_with_c_hash(self):
self.token["code"] = "Qcb0Orv1zh30vL1MPRsbm-diHiMwcLyZvn1arpZv-Jxf_11jnpEX3Tgfvk"
token = self.grant.add_id_token(self.token, "token_handler_mock", self.request)
self.assertIn("id_token", token)
self.assertEqual(token["id_token"], "eyJ.body.signature")
id_token = self.mock_validator.finalize_id_token.call_args[0][0]
self.assertEqual(id_token['c_hash'], 'LDktKdoQak3Pk0cnXxCltA')
def test_finalize_id_token_with_c_and_at_hash(self):
self.token["code"] = "Qcb0Orv1zh30vL1MPRsbm-diHiMwcLyZvn1arpZv-Jxf_11jnpEX3Tgfvk"
self.token["access_token"] = "Qcb0Orv1zh30vL1MPRsbm-diHiMwcLyZvn1arpZv-Jxf_11jnpEX3Tgfvk"
token = self.grant.add_id_token(self.token, "token_handler_mock", self.request)
self.assertIn("id_token", token)
self.assertEqual(token["id_token"], "eyJ.body.signature")
id_token = self.mock_validator.finalize_id_token.call_args[0][0]
self.assertEqual(id_token['at_hash'], 'LDktKdoQak3Pk0cnXxCltA')
self.assertEqual(id_token['c_hash'], 'LDktKdoQak3Pk0cnXxCltA')
|
