org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService クラス

org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService 連携図

公開メンバ関数
ExpectedException exception	ExpectedException::none ()
void	prepare () throws NoSuchAlgorithmException, InvalidKeySpecException, JOSEException
void	decrypt_RSA () throws ParseException, NoSuchAlgorithmException
void	encryptThenDecrypt_RSA () throws ParseException, NoSuchAlgorithmException
void	encryptThenDecrypt_nullID () throws ParseException, NoSuchAlgorithmException
void	encrypt_nullID_oneKey () throws NoSuchAlgorithmException
void	decrypt_nullID () throws ParseException, NoSuchAlgorithmException
void	setThenGetDefAlg () throws ParseException
void	getAllPubKeys () throws ParseException
void	getAllCryptoAlgsSupported () throws ParseException
void	getDefaultCryptoKeyId () throws ParseException

非公開変数類
String	plainText = "The true sign of intelligence is not knowledge but imagination."
String	issuer = "www.example.net"
String	subject = "example_user"
JWTClaimsSet	claimsSet = null
String	compactSerializedJwe
String	RSAkid = "rsa321"
JWK	RSAjwk
String	RSAkid_2 = "rsa3210"
JWK	RSAjwk_2
String	AESkid = "aes123"
JWK	AESjwk
Map< String, JWK >	keys
Map< String, JWK >	keys_2
Map< String, JWK >	keys_3
Map< String, JWK >	keys_4
List< JWK >	keys_list = new LinkedList<>()
DefaultJWTEncryptionAndDecryptionService	service
DefaultJWTEncryptionAndDecryptionService	service_2
DefaultJWTEncryptionAndDecryptionService	service_3
DefaultJWTEncryptionAndDecryptionService	service_4
DefaultJWTEncryptionAndDecryptionService	service_ks

静的非公開変数類
static Logger	logger = LoggerFactory.getLogger(TestDefaultJWTEncryptionAndDecryptionService.class)

詳解

著者

wkim

tsitkov

関数詳解

decrypt_nullID()

void org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.decrypt_nullID ( ) throws ParseException, NoSuchAlgorithmException

inline

                                                                                     {

                Assume.assumeTrue(JCASupport.isSupported(JWEAlgorithm.RSA_OAEP) // check for algorithm support
                                && JCASupport.isSupported(EncryptionMethod.A256GCM)
                                && Cipher.getMaxAllowedKeyLength("RC5") >= 256); // check for unlimited crypto strength


                exception.expect(IllegalStateException.class);

                service_2.setDefaultEncryptionKeyId(RSAkid);
                service_2.setDefaultDecryptionKeyId(null);

                assertEquals(RSAkid, service_2.getDefaultEncryptionKeyId());
                assertEquals(null, service_2.getDefaultDecryptionKeyId());

                JWEHeader header = new JWEHeader(JWEAlgorithm.RSA_OAEP, EncryptionMethod.A256GCM);

                EncryptedJWT jwt = new EncryptedJWT(header, claimsSet);
                service_2.encryptJwt(jwt);
                String serialized = jwt.serialize();

                EncryptedJWT encryptedJwt = EncryptedJWT.parse(serialized);
                assertThat(encryptedJwt.getJWTClaimsSet(), nullValue());

                assertEquals(null, service_2.getDefaultDecryptionKeyId());
                service_2.decryptJwt(encryptedJwt);
        }

decrypt_RSA()

void org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.decrypt_RSA ( ) throws ParseException, NoSuchAlgorithmException

inline

                                                                                  {

                Assume.assumeTrue(JCASupport.isSupported(JWEAlgorithm.RSA_OAEP) // check for algorithm support
                                && JCASupport.isSupported(EncryptionMethod.A256GCM)
                                && Cipher.getMaxAllowedKeyLength("RC5") >= 256); // check for unlimited crypto strength

                service.setDefaultDecryptionKeyId(RSAkid);
                service.setDefaultEncryptionKeyId(RSAkid);

                JWEObject jwt = JWEObject.parse(compactSerializedJwe);

                assertThat(jwt.getPayload(), nullValue()); // observe..nothing is there

                service.decryptJwt(jwt);
                String result = jwt.getPayload().toString(); // and voila! decrypto-magic

                assertEquals(plainText, result);
        }

encrypt_nullID_oneKey()

void org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.encrypt_nullID_oneKey ( ) throws NoSuchAlgorithmException

inline

                                                                            {

                Assume.assumeTrue(JCASupport.isSupported(JWEAlgorithm.RSA_OAEP) // check for algorithm support
                                && JCASupport.isSupported(EncryptionMethod.A256GCM)
                                && Cipher.getMaxAllowedKeyLength("RC5") >= 256); // check for unlimited crypto strength

                exception.expect(IllegalStateException.class);

                service_2.setDefaultEncryptionKeyId(null);
                assertEquals(null, service_2.getDefaultEncryptionKeyId());

                JWEHeader header = new JWEHeader(JWEAlgorithm.RSA_OAEP, EncryptionMethod.A256GCM);

                EncryptedJWT jwt = new EncryptedJWT(header, claimsSet);

                service_2.encryptJwt(jwt);
                assertEquals(null, service_2.getDefaultEncryptionKeyId());
        }

encryptThenDecrypt_nullID()

void org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.encryptThenDecrypt_nullID ( ) throws ParseException, NoSuchAlgorithmException

inline

                                                                                                {

                Assume.assumeTrue(JCASupport.isSupported(JWEAlgorithm.RSA_OAEP) // check for algorithm support
                                && JCASupport.isSupported(EncryptionMethod.A256GCM)
                                && Cipher.getMaxAllowedKeyLength("RC5") >= 256); // check for unlimited crypto strength

                service.setDefaultDecryptionKeyId(null);
                service.setDefaultEncryptionKeyId(null);

                assertEquals(RSAkid,service.getDefaultEncryptionKeyId());
                assertEquals(RSAkid,service.getDefaultDecryptionKeyId());

                JWEHeader header = new JWEHeader(JWEAlgorithm.RSA_OAEP, EncryptionMethod.A256GCM);

                EncryptedJWT jwt = new EncryptedJWT(header, claimsSet);

                service.encryptJwt(jwt);
                String serialized = jwt.serialize();

                EncryptedJWT encryptedJwt = EncryptedJWT.parse(serialized);
                assertThat(encryptedJwt.getJWTClaimsSet(), nullValue());
                service.decryptJwt(encryptedJwt);

                JWTClaimsSet resultClaims = encryptedJwt.getJWTClaimsSet();

                assertEquals(claimsSet.getIssuer(), resultClaims.getIssuer());
                assertEquals(claimsSet.getSubject(), resultClaims.getSubject());
        }

encryptThenDecrypt_RSA()

void org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.encryptThenDecrypt_RSA ( ) throws ParseException, NoSuchAlgorithmException

inline

                                                                                             {

                Assume.assumeTrue(JCASupport.isSupported(JWEAlgorithm.RSA_OAEP) // check for algorithm support
                                && JCASupport.isSupported(EncryptionMethod.A256GCM)
                                && Cipher.getMaxAllowedKeyLength("RC5") >= 256); // check for unlimited crypto strength

                service.setDefaultDecryptionKeyId(RSAkid);
                service.setDefaultEncryptionKeyId(RSAkid);

                assertEquals(RSAkid,service.getDefaultEncryptionKeyId());
                assertEquals(RSAkid,service.getDefaultDecryptionKeyId());

                JWEHeader header = new JWEHeader(JWEAlgorithm.RSA_OAEP, EncryptionMethod.A256GCM);

                EncryptedJWT jwt = new EncryptedJWT(header, claimsSet);

                service.encryptJwt(jwt);
                String serialized = jwt.serialize();

                EncryptedJWT encryptedJwt = EncryptedJWT.parse(serialized);
                assertThat(encryptedJwt.getJWTClaimsSet(), nullValue());
                service.decryptJwt(encryptedJwt);

                JWTClaimsSet resultClaims = encryptedJwt.getJWTClaimsSet();

                assertEquals(claimsSet.getIssuer(), resultClaims.getIssuer());
                assertEquals(claimsSet.getSubject(), resultClaims.getSubject());
        }

ExpectedException::none()

ExpectedException exception org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.ExpectedException.none

(

)

getAllCryptoAlgsSupported()

void org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.getAllCryptoAlgsSupported ( ) throws ParseException

inline

                                                                      {

                assertTrue(service_4.getAllEncryptionAlgsSupported().contains(JWEAlgorithm.RSA_OAEP));
                assertTrue(service_4.getAllEncryptionAlgsSupported().contains(JWEAlgorithm.RSA1_5));
                assertTrue(service_4.getAllEncryptionAlgsSupported().contains(JWEAlgorithm.DIR));
                assertTrue(service_4.getAllEncryptionEncsSupported().contains(EncryptionMethod.A128CBC_HS256));
                assertTrue(service_4.getAllEncryptionEncsSupported().contains(EncryptionMethod.A128GCM));
                assertTrue(service_4.getAllEncryptionEncsSupported().contains(EncryptionMethod.A192CBC_HS384));
                assertTrue(service_4.getAllEncryptionEncsSupported().contains(EncryptionMethod.A192GCM));
                assertTrue(service_4.getAllEncryptionEncsSupported().contains(EncryptionMethod.A256GCM));
                assertTrue(service_4.getAllEncryptionEncsSupported().contains(EncryptionMethod.A256CBC_HS512));

                assertTrue(service_ks.getAllEncryptionAlgsSupported().contains(JWEAlgorithm.RSA_OAEP));
                assertTrue(service_ks.getAllEncryptionAlgsSupported().contains(JWEAlgorithm.RSA1_5));
                assertTrue(service_ks.getAllEncryptionAlgsSupported().contains(JWEAlgorithm.DIR));
                assertTrue(service_ks.getAllEncryptionEncsSupported().contains(EncryptionMethod.A128CBC_HS256));
                assertTrue(service_ks.getAllEncryptionEncsSupported().contains(EncryptionMethod.A128GCM));
                assertTrue(service_ks.getAllEncryptionEncsSupported().contains(EncryptionMethod.A192CBC_HS384));
                assertTrue(service_ks.getAllEncryptionEncsSupported().contains(EncryptionMethod.A192GCM));
                assertTrue(service_ks.getAllEncryptionEncsSupported().contains(EncryptionMethod.A256GCM));
                assertTrue(service_ks.getAllEncryptionEncsSupported().contains(EncryptionMethod.A256CBC_HS512));
        }

getAllPubKeys()

void org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.getAllPubKeys ( ) throws ParseException

inline

                                                          {

                Map<String,JWK> keys2check = service_2.getAllPublicKeys();
                assertEquals(
                                JSONObjectUtils.getString(RSAjwk.toPublicJWK().toJSONObject(), "e"),
                                JSONObjectUtils.getString(keys2check.get(RSAkid).toJSONObject(), "e")
                                );
                assertEquals(
                                JSONObjectUtils.getString(RSAjwk_2.toPublicJWK().toJSONObject(), "e"),
                                JSONObjectUtils.getString(keys2check.get(RSAkid_2).toJSONObject(), "e")
                                );

                assertTrue(service_3.getAllPublicKeys().isEmpty());
        }

getDefaultCryptoKeyId()

void org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.getDefaultCryptoKeyId ( ) throws ParseException

inline

                                                                  {

                // Test set/getDefaultEn/DecryptionKeyId

                assertEquals(null, service_4.getDefaultEncryptionKeyId());
                assertEquals(null, service_4.getDefaultDecryptionKeyId());
                service_4.setDefaultEncryptionKeyId(RSAkid);
                service_4.setDefaultDecryptionKeyId(AESkid);
                assertEquals(RSAkid, service_4.getDefaultEncryptionKeyId());
                assertEquals(AESkid, service_4.getDefaultDecryptionKeyId());

                assertEquals(null, service_ks.getDefaultEncryptionKeyId());
                assertEquals(null, service_ks.getDefaultDecryptionKeyId());
                service_ks.setDefaultEncryptionKeyId(RSAkid);
                service_ks.setDefaultDecryptionKeyId(AESkid);
                assertEquals( RSAkid, service_ks.getDefaultEncryptionKeyId()) ;
                assertEquals(AESkid, service_ks.getDefaultDecryptionKeyId());
        }

prepare()

void org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.prepare ( ) throws NoSuchAlgorithmException, InvalidKeySpecException, JOSEException

inline

                                                                                                      {

                service = new DefaultJWTEncryptionAndDecryptionService(keys);
                service_2 = new DefaultJWTEncryptionAndDecryptionService(keys_2);
                service_3 = new DefaultJWTEncryptionAndDecryptionService(keys_3);
                service_4 = new DefaultJWTEncryptionAndDecryptionService(keys_4);

                claimsSet = new JWTClaimsSet.Builder()
                                .issuer(issuer)
                                .subject(subject)
                                .build();

                // Key Store

                keys_list.add(RSAjwk);
                keys_list.add(AESjwk);
                JWKSet jwkSet = new JWKSet(keys_list);
                JWKSetKeyStore keyStore = new JWKSetKeyStore(jwkSet);

                service_ks = new DefaultJWTEncryptionAndDecryptionService(keyStore);
        }

setThenGetDefAlg()

void org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.setThenGetDefAlg ( ) throws ParseException

inline

                                                             {

                service.setDefaultAlgorithm(JWEAlgorithm.A128KW);
                assertEquals(JWEAlgorithm.A128KW, service.getDefaultAlgorithm());

                service.setDefaultAlgorithm(JWEAlgorithm.RSA_OAEP);
                assertEquals(JWEAlgorithm.RSA_OAEP, service.getDefaultAlgorithm());
        }

メンバ詳解

AESjwk

JWK org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.AESjwk

private

初期値:

= new OctetSequenceKey(new Base64URL("GawgguFyGrWKav7AX4VKUg"),
                        KeyUse.ENCRYPTION, null, JWEAlgorithm.A128KW,
                        AESkid, null, null, null, null)

AESkid

String org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.AESkid = "aes123"

private

claimsSet

JWTClaimsSet org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.claimsSet = null

private

compactSerializedJwe

String org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.compactSerializedJwe

private

初期値:

= "eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZHQ00ifQ." +
                        "OKOawDo13gRp2ojaHV7LFpZcgV7T6DVZKTyKOMTYUmKoTCVJRgckCL9kiMT03JGe" +
                        "ipsEdY3mx_etLbbWSrFr05kLzcSr4qKAq7YN7e9jwQRb23nfa6c9d-StnImGyFDb" +
                        "Sv04uVuxIp5Zms1gNxKKK2Da14B8S4rzVRltdYwam_lDp5XnZAYpQdb76FdIKLaV" +
                        "mqgfwX7XWRxv2322i-vDxRfqNzo_tETKzpVLzfiwQyeyPGLBIO56YJ7eObdv0je8" +
                        "1860ppamavo35UgoRdbYaBcoh9QcfylQr66oc6vFWXRcZ_ZT2LawVCWTIy3brGPi" +
                        "6UklfCpIMfIjf7iGdXKHzg." +
                        "48V1_ALb6US04U3b." +
                        "5eym8TW_c8SuK0ltJ3rpYIzOeDQz7TALvtu6UG9oMo4vpzs9tX_EFShS8iB7j6ji" +
                        "SdiwkIr3ajwQzaBtQD_A." +
                        "XFBoMYUZodetZdvTiFvSkQ"

issuer

String org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.issuer = "www.example.net"

private

keys

Map<String, JWK> org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.keys

private

初期値:

= new ImmutableMap.Builder<String, JWK>()
                        .put(RSAkid, RSAjwk)
                        .build()

keys_2

Map<String, JWK> org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.keys_2

private

初期値:

= new ImmutableMap.Builder<String, JWK>()
                        .put(RSAkid, RSAjwk)
                        .put(RSAkid_2, RSAjwk_2)
                        .build()

keys_3

Map<String, JWK> org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.keys_3

private

初期値:

= new ImmutableMap.Builder<String, JWK>()
                        .put(AESkid, AESjwk)
                        .build()

keys_4

Map<String, JWK> org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.keys_4

private

初期値:

= new ImmutableMap.Builder<String, JWK>()
                        .put(RSAkid, RSAjwk)
                        .put(RSAkid_2, RSAjwk_2)
                        .put(AESkid, AESjwk)
                        .build()

keys_list

List<JWK> org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.keys_list = new LinkedList<>()

private

logger

Logger org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.logger = LoggerFactory.getLogger(TestDefaultJWTEncryptionAndDecryptionService.class)

staticprivate

plainText

String org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.plainText = "The true sign of intelligence is not knowledge but imagination."

private

RSAjwk

JWK org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.RSAjwk

private

初期値:

= new RSAKey(
                        new Base64URL("oahUIoWw0K0usKNuOR6H4wkf4oBUXHTxRvgb48E-BVvxkeDNjbC4he8rUW" +
                                        "cJoZmds2h7M70imEVhRU5djINXtqllXI4DFqcI1DgjT9LewND8MW2Krf3S" +
                                        "psk_ZkoFnilakGygTwpZ3uesH-PFABNIUYpOiN15dsQRkgr0vEhxN92i2a" +
                                        "sbOenSZeyaxziK72UwxrrKoExv6kc5twXTq4h-QChLOln0_mtUZwfsRaMS" +
                                        "tPs6mS6XrgxnxbWhojf663tuEQueGC-FCMfra36C9knDFGzKsNa7LZK2dj" +
                                        "YgyD3JR_MB_4NUJW_TqOQtwHYbxevoJArm-L5StowjzGy-_bq6Gw"), 
                        new Base64URL("AQAB"), 
                        new Base64URL("kLdtIj6GbDks_ApCSTYQtelcNttlKiOyPzMrXHeI-yk1F7-kpDxY4-WY5N" +
                                        "WV5KntaEeXS1j82E375xxhWMHXyvjYecPT9fpwR_M9gV8n9Hrh2anTpTD9" +
                                        "3Dt62ypW3yDsJzBnTnrYu1iwWRgBKrEYY46qAZIrA2xAwnm2X7uGR1hghk" +
                                        "qDp0Vqj3kbSCz1XyfCs6_LehBwtxHIyh8Ripy40p24moOAbgxVw3rxT_vl" +
                                        "t3UVe4WO3JkJOzlpUf-KTVI2Ptgm-dARxTEtE-id-4OJr0h-K-VFs3VSnd" +
                                        "VTIznSxfyrj8ILL6MG_Uv8YAu7VILSB3lOW085-4qE3DzgrTjgyQ"), 
                        KeyUse.ENCRYPTION, null, JWEAlgorithm.RSA_OAEP, RSAkid, null, null, null, null)

RSAjwk_2

JWK org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.RSAjwk_2

private

初期値:

= new RSAKey(
                        new Base64URL("oahUIoWw0K0usKNuOR6H4wkf4oBUXHTxRvgb48E-BVvxkeDNjbC4he8rUW" +
                                        "cJoZmds2h7M70imEVhRU5djINXtqllXI4DFqcI1DgjT9LewND8MW2Krf3S" +
                                        "psk_ZkoFnilakGygTwpZ3uesH-PFABNIUYpOiN15dsQRkgr0vEhxN92i2a" +
                                        "sbOenSZeyaxziK72UwxrrKoExv6kc5twXTq4h-QChLOln0_mtUZwfsRaMS" +
                                        "tPs6mS6XrgxnxbWhojf663tuEQueGC-FCMfra36C9knDFGzKsNa7LZK2dj" +
                                        "YgyD3JR_MB_4NUJW_TqOQtwHYbxevoJArm-L5StowjzGy-_bq6Gw"), 
                        new Base64URL("AQAB"), 
                        new Base64URL("kLdtIj6GbDks_ApCSTYQtelcNttlKiOyPzMrXHeI-yk1F7-kpDxY4-WY5N" +
                                        "WV5KntaEeXS1j82E375xxhWMHXyvjYecPT9fpwR_M9gV8n9Hrh2anTpTD9" +
                                        "3Dt62ypW3yDsJzBnTnrYu1iwWRgBKrEYY46qAZIrA2xAwnm2X7uGR1hghk" +
                                        "qDp0Vqj3kbSCz1XyfCs6_LehBwtxHIyh8Ripy40p24moOAbgxVw3rxT_vl" +
                                        "t3UVe4WO3JkJOzlpUf-KTVI2Ptgm-dARxTEtE-id-4OJr0h-K-VFs3VSnd" +
                                        "VTIznSxfyrj8ILL6MG_Uv8YAu7VILSB3lOW085-4qE3DzgrTjgyQ"), 
                        KeyUse.ENCRYPTION, null, JWEAlgorithm.RSA1_5, RSAkid_2, null, null, null, null)

RSAkid

String org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.RSAkid = "rsa321"

private

RSAkid_2

String org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.RSAkid_2 = "rsa3210"

private

service

DefaultJWTEncryptionAndDecryptionService org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.service

private

service_2

DefaultJWTEncryptionAndDecryptionService org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.service_2

private

service_3

DefaultJWTEncryptionAndDecryptionService org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.service_3

private

service_4

DefaultJWTEncryptionAndDecryptionService org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.service_4

private

service_ks

DefaultJWTEncryptionAndDecryptionService org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.service_ks

private

subject

String org.mitre.jwt.encryption.service.impl.TestDefaultJWTEncryptionAndDecryptionService.subject = "example_user"

private

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/mitreid-connect/src/openid-connect-common/src/test/java/org/mitre/jwt/encryption/service/impl/TestDefaultJWTEncryptionAndDecryptionService.java