cim/zitadel-oidc
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add HS256/384/512 hash support

Browse source
This commit is contained in:
Roman Isaev 2025-02-25 00:30:03 +00:00
parent 4ef9529012
commit e9f1bbc972
No known key found for this signature in database
GPG key ID: 7BE2B6A6C89AEC7F
5 changed files with 24 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

24
pkg/client/rp/verifier_test.go
View file

@ -255,7 +255,11 @@ func TestVerifyIDToken(t *testing.T) {
func TestVerifyAccessToken(t *testing.T) {
token, _ := tu.ValidAccessToken()
hash, err := oidc.ClaimHash(token, tu.SignatureAlgorithm)
sigAlgoRS256 := jose.RS256
hashRS256, err := oidc.ClaimHash(token, sigAlgoRS256)
require.NoError(t, err)
sigAlgoHS256 := jose.HS256
hashHS256, err := oidc.ClaimHash(token, sigAlgoHS256)
require.NoError(t, err)
type args struct {
@ -272,18 +276,26 @@ func TestVerifyAccessToken(t *testing.T) {
name: "empty hash",
},
{
name: "success",
name: "success RS256",
args: args{
accessToken: token,
atHash: hash,
sigAlgorithm: tu.SignatureAlgorithm,
atHash: hashRS256,
sigAlgorithm: sigAlgoRS256,
},
},
{
name: "success HS256",
args: args{
accessToken: token,
atHash: hashHS256,
sigAlgorithm: sigAlgoHS256,
},
},
{
name: "invalid algorithm",
args: args{
accessToken: token,
atHash: hash,
atHash: hashRS256,
sigAlgorithm: "foo",
},
wantErr: true,
@ -293,7 +305,7 @@ func TestVerifyAccessToken(t *testing.T) {
args: args{
accessToken: token,
atHash: "~~",
sigAlgorithm: tu.SignatureAlgorithm,
sigAlgorithm: sigAlgoRS256,
},
wantErr: true,
},