-
Notifications
You must be signed in to change notification settings - Fork 44
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
add unit tests for cache.ts and alb-cache.ts
- Loading branch information
1 parent
2c79a0d
commit 3de4328
Showing
6 changed files
with
200 additions
and
127 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,97 @@ | ||
| import { AwsAlbJwksCache } from "../../src/alb-cache"; | ||
| import { | ||
| JwksValidationError, | ||
| JwkValidationError, | ||
| JwtWithoutValidKidError, | ||
| } from "../../src/error"; | ||
| import { allowAllRealNetworkTraffic, disallowAllRealNetworkTraffic, generateKeyPair } from "./test-util"; | ||
|
|
||
| describe("unit tests AwsAlbJwksCache", () => { | ||
| const jwksUri = "https://public-keys.auth.elb.eu-west-1.amazonaws.com"; | ||
| let keypair: ReturnType<typeof generateKeyPair>; | ||
| const getDecomposedJwt = (kid?: string) => ({ | ||
| header: { | ||
| alg: "EC256", | ||
| kid: kid ?? keypair.jwk.kid ?? "kid", | ||
| }, | ||
| payload: {}, | ||
| }); | ||
| const getAlbResponseArrayBuffer = () => { | ||
| const encoder = new TextEncoder(); | ||
| return encoder.encode(keypair.publicKeyPem).buffer; | ||
| } | ||
| beforeAll(() => { | ||
| keypair = generateKeyPair({ | ||
| kid: "00000000-0000-0000-0000-000000000000", | ||
| kty: "EC", | ||
| alg: "ES256", | ||
| }); | ||
| disallowAllRealNetworkTraffic(); | ||
| }); | ||
| afterAll(() => { | ||
| allowAllRealNetworkTraffic(); | ||
| }); | ||
|
|
||
| test("ALB JWKS cache error flow: kid empty", () => { | ||
| const jwksCache = new AwsAlbJwksCache(); | ||
| expect.assertions(1); | ||
| return expect( | ||
| jwksCache.getJwk(jwksUri, { header: { alg: "EC256" }, payload: {} }) | ||
| ).rejects.toThrow(JwtWithoutValidKidError); | ||
| }); | ||
|
|
||
| test("ALB JWKS cache returns cached JWK", () => { | ||
| const jwksCache = new AwsAlbJwksCache(); | ||
| jwksCache.addJwks(jwksUri, keypair.jwks); | ||
| expect(jwksCache.getCachedJwk(jwksUri, getDecomposedJwt())).toEqual( | ||
| keypair.jwk | ||
| ); | ||
| }); | ||
|
|
||
| test("ALB JWKS add cache return multiple JWK exception", () => { | ||
| const jwksCache = new AwsAlbJwksCache(); | ||
| expect(()=>jwksCache.addJwks(jwksUri, { | ||
| keys: [keypair.jwk, keypair.jwk] | ||
| })).toThrow(JwksValidationError); | ||
| }); | ||
|
|
||
| test("ALB JWKS add cache return no kid", () => { | ||
| const jwksCache = new AwsAlbJwksCache(); | ||
| expect(()=>jwksCache.addJwks(jwksUri, { | ||
| keys: [{ | ||
| kty: "EC", | ||
| alg: "ES256" | ||
| }] | ||
| })).toThrow(JwkValidationError); | ||
| }); | ||
|
|
||
| test("ALB JWKS get JWKS return not implemented exception", () => { | ||
| const jwksCache = new AwsAlbJwksCache(); | ||
| expect.assertions(1); | ||
| return expect(jwksCache.getJwks()).rejects.toThrow( | ||
| "Method not implemented." | ||
| ); | ||
| }); | ||
|
|
||
| test("ALB JWKS cache fetches URI one attempt at a time", async () => { | ||
| /** | ||
| * Test what happens when the the JWKS URI is requested multiple times in parallel | ||
| * (e.g. in parallel promises). When this happens only 1 actual HTTPS request should | ||
| * be made to the JWKS URI. | ||
| */ | ||
| const fetcher = { | ||
| fetch: jest.fn(async () => getAlbResponseArrayBuffer()), | ||
| }; | ||
| const jwksCache = new AwsAlbJwksCache({ | ||
| fetcher, | ||
| }); | ||
| const promise1 = jwksCache.getJwk(jwksUri, getDecomposedJwt()); | ||
| const promise2 = jwksCache.getJwk(jwksUri, getDecomposedJwt()); | ||
| expect.assertions(2); | ||
| expect(promise1).toEqual(promise2); | ||
| await Promise.all([promise1, promise2]); | ||
| expect(fetcher.fetch).toHaveBeenCalledTimes(1); | ||
| }); | ||
|
|
||
| }); | ||
|
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.