mirror of
https://github.com/vmware-tanzu/pinniped.git
synced 2026-02-04 12:02:36 +00:00
e9252a9ee3
- k8s.io/apimachinery/pkg/apis/meta/v1 - k8s.io/api/core/v1 - github.com/coreos/go-oidc/v3/oidc - github.com/ory/fosite/handler/oauth2 - go.pinniped.dev/generated/latest/apis/concierge/authentication/v1alpha1
41 lines
1.0 KiB
Go
41 lines
1.0 KiB
Go
// Copyright 2020-2024 the Pinniped contributors. All Rights Reserved.
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package nonce
|
|
|
|
import (
|
|
"bytes"
|
|
"errors"
|
|
"net/url"
|
|
"testing"
|
|
|
|
coreosoidc "github.com/coreos/go-oidc/v3/oidc"
|
|
"github.com/stretchr/testify/require"
|
|
"golang.org/x/oauth2"
|
|
)
|
|
|
|
func TestNonce(t *testing.T) {
|
|
n, err := Generate()
|
|
require.NoError(t, err)
|
|
require.Len(t, n, 32)
|
|
require.Len(t, n.String(), 32)
|
|
|
|
cfg := oauth2.Config{}
|
|
authCodeURL, err := url.Parse(cfg.AuthCodeURL("", n.Param()))
|
|
require.NoError(t, err)
|
|
require.Equal(t, n.String(), authCodeURL.Query().Get("nonce"))
|
|
|
|
require.Error(t, n.Validate(&coreosoidc.IDToken{}))
|
|
require.NoError(t, n.Validate(&coreosoidc.IDToken{Nonce: string(n)}))
|
|
|
|
err = n.Validate(&coreosoidc.IDToken{Nonce: string(n) + "x"})
|
|
require.Error(t, err)
|
|
require.True(t, errors.As(err, &InvalidNonceError{}))
|
|
require.Contains(t, err.Error(), string(n)+"x")
|
|
|
|
var empty bytes.Buffer
|
|
n, err = generate(&empty)
|
|
require.EqualError(t, err, "could not generate random nonce: EOF")
|
|
require.Empty(t, n)
|
|
}
|