Class TestJWS

tests/test_jws.py:23–90

class TestJWS:
    def test_unicode_token(self):
        token = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhIjoiYiJ9.jiMyrsmD8AoHWeQgmxZ5yq8z0lXS67_QGs52AzC8Ru8"
        jws.verify(token, "secret", ["HS256"])

    def test_multiple_keys(self):
        old_jwk_verify = jwk.HMACKey.verify
        try:
            token = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhIjoiYiJ9.jiMyrsmD8AoHWeQgmxZ5yq8z0lXS67_QGs52AzC8Ru8"

            def raise_exception(self, msg, sig):
                if self.prepared_key == b"incorrect":
                    raise Exception("Mocked function jose.jwk.HMACKey.verify")
                else:
                    return True

            jwk.HMACKey.verify = raise_exception
            jws.verify(token, {"keys": ["incorrect", "secret"]}, ["HS256"])
        finally:
            jwk.HMACKey.verify = old_jwk_verify

    def test_invalid_algorithm(self):
        token = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhIjoiYiJ9.jiMyrsmD8AoHWeQgmxZ5yq8z0lXS67_QGs52AzC8Ru8"
        with pytest.raises(JWSError):
            jws.verify(token, "secret", [None])

    def test_not_enough_segments(self):
        token = "eyJhIjoiYiJ9.jiMyrsmD8AoHWeQgmxZ5yq8z0lXS67_QGs52AzC8Ru8"
        with pytest.raises(JWSError):
            jws.verify(token, "secret", ["HS256"])

    def test_header_invalid_padding(self):
        token = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9A.eyJhIjoiYiJ9.jiMyrsmD8AoHWeQgmxZ5yq8z0lXS67_QGs52AzC8Ru8"
        with pytest.raises(JWSError):
            jws.verify(token, "secret", ["HS256"])

    def test_header_not_json(self):
        token = "dGVzdA.eyJhIjoiYiJ9.jiMyrsmD8AoHWeQgmxZ5yq8z0lXS67_QGs52AzC8Ru8"
        with pytest.raises(JWSError):
            jws.verify(token, "secret", ["HS256"])

    def test_claims_invalid_padding(self):
        token = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.AeyJhIjoiYiJ9.jiMyrsmD8AoHWeQgmxZ5yq8z0lXS67_QGs52AzC8Ru8"
        with pytest.raises(JWSError):
            jws.verify(token, "secret", ["HS256"])

    def test_claims_not_json(self):
        token = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.dGVzdA.jiMyrsmD8AoHWeQgmxZ5yq8z0lXS67_QGs52AzC8Ru8"
        with pytest.raises(JWSError):
            jws.verify(token, "secret", ["HS256"])

    def test_invalid_key(self, payload):
        with pytest.raises(JWSError):
            jws.sign(payload, "secret", algorithm="RS256")

    @pytest.mark.parametrize(
        "key",
        [