135 lines
4.0 KiB
JavaScript
135 lines
4.0 KiB
JavaScript
'use strict'
|
|
|
|
const { test } = require('node:test')
|
|
const Fastify = require('fastify')
|
|
const jwt = require('../jwt')
|
|
const { createSigner } = require('fast-jwt')
|
|
|
|
test('Async key provider should be resolved internally', async function (t) {
|
|
const fastify = Fastify()
|
|
fastify.register(jwt, {
|
|
secret: {
|
|
private: 'supersecret',
|
|
public: async () => Promise.resolve('supersecret')
|
|
},
|
|
verify: {
|
|
extractToken: (request) => request.headers.jwt,
|
|
key: () => Promise.resolve('supersecret')
|
|
}
|
|
})
|
|
fastify.get('/', async function (request, reply) {
|
|
const token = await reply.jwtSign({ user: 'test' })
|
|
request.headers.jwt = token
|
|
await request.jwtVerify()
|
|
return reply.send(request.user)
|
|
})
|
|
const response = await fastify.inject({
|
|
method: 'get',
|
|
url: '/',
|
|
headers: {
|
|
jwt: 'supersecret'
|
|
}
|
|
})
|
|
t.assert.ok(response)
|
|
t.assert.strictEqual(response.json().user, 'test')
|
|
})
|
|
|
|
test('Async key provider errors should be resolved internally', async function (t) {
|
|
const fastify = Fastify()
|
|
fastify.register(jwt, {
|
|
secret: {
|
|
public: async () => Promise.resolve('key used per request, false not allowed')
|
|
},
|
|
verify: {
|
|
extractToken: (request) => request.headers.jwt,
|
|
key: () => Promise.resolve('key not used')
|
|
}
|
|
})
|
|
fastify.get('/', async function (request, reply) {
|
|
const signSync = createSigner({ key: 'invalid signature error' })
|
|
request.headers.jwt = signSync({ sub: '1234567890', name: 'John Doe', iat: 1516239022 })
|
|
// call to local verifier without cache
|
|
await request.jwtVerify()
|
|
return reply.send(typeof request.user.then)
|
|
})
|
|
const response = await fastify.inject({
|
|
method: 'get',
|
|
url: '/'
|
|
})
|
|
|
|
t.assert.strictEqual(response.statusCode, 401)
|
|
})
|
|
|
|
test('Async key provider should be resolved internally with cache', async function (t) {
|
|
const fastify = Fastify()
|
|
fastify.register(jwt, {
|
|
secret: {
|
|
private: 'this secret reused from cache',
|
|
public: async () => false
|
|
},
|
|
verify: {
|
|
extractToken: (request) => request.headers.jwt,
|
|
key: () => Promise.resolve('this secret reused from cache')
|
|
}
|
|
})
|
|
fastify.get('/', async function (request, reply) {
|
|
const signSync = createSigner({ key: 'this secret reused from cache' })
|
|
request.headers.jwt = signSync({ sub: '1234567890', name: 'John Doe', iat: 1516239022 })
|
|
await new Promise((resolve, reject) => request.jwtVerify((err, payload) => {
|
|
if (err) {
|
|
reject(err)
|
|
return
|
|
}
|
|
resolve(payload)
|
|
}))
|
|
await new Promise((resolve, reject) => request.jwtVerify((err, payload) => {
|
|
if (err) {
|
|
reject(err)
|
|
return
|
|
}
|
|
resolve(payload)
|
|
}))
|
|
return reply.send(request.user)
|
|
})
|
|
const response = await fastify.inject({
|
|
method: 'get',
|
|
url: '/'
|
|
})
|
|
t.assert.strictEqual(response.statusCode, 200)
|
|
t.assert.strictEqual(response.json().name, 'John Doe')
|
|
})
|
|
|
|
test('Async key provider errors should be resolved internally with cache', async function (t) {
|
|
const fastify = Fastify()
|
|
fastify.register(jwt, {
|
|
secret: {
|
|
public: async () => false
|
|
},
|
|
verify: {
|
|
extractToken: (request) => request.headers.jwt,
|
|
key: () => Promise.resolve('this secret reused from cache')
|
|
}
|
|
})
|
|
fastify.get('/', async function (request, reply) {
|
|
const signSync = createSigner({ key: 'invalid signature error' })
|
|
request.headers.jwt = signSync({ sub: '1234567890', name: 'John Doe', iat: 1516239022 })
|
|
// request.headers.jwt =
|
|
// 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c'
|
|
// call to plugin root level verifier
|
|
await new Promise((resolve, reject) => request.jwtVerify((err, payload) => {
|
|
if (err) {
|
|
reject(err)
|
|
return
|
|
}
|
|
resolve(payload)
|
|
}))
|
|
return reply.send(typeof request.user.then)
|
|
})
|
|
const response = await fastify.inject({
|
|
method: 'get',
|
|
url: '/'
|
|
})
|
|
|
|
t.assert.strictEqual(response.statusCode, 401)
|
|
})
|