google-jwt-verify 0.3.0

use super::*;
use crate::error::Error;
use crate::jwk::JsonWebKey;
use crate::jwk::JsonWebKeySet;
#[cfg(feature = "async")]
use crate::key_provider::AsyncKeyProvider;
#[cfg(feature = "blocking")]
use crate::key_provider::KeyProvider;

#[cfg(feature = "async")]
use async_trait::async_trait;

const TOKEN: &'static str = "eyJhbGciOiJSUzI1NiIsImtpZCI6ImE3NDhlOWY3NjcxNTlmNjY3YTAyMjMzMThkZTBiMjMyOWU1NDQzNjIifQ.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.pOoIMLZgZIFP-fgQirCRRK31ap_CO7WZDeHge-U5GoAvF0VdkoSDSL-1-8d93qKb8IWzi2iS2MgaLekcX8eELM5x39Th1sBwjQGjYr5AXmqE53WDQiqvKzrz-BZ3ay0uSAMllxWfFi62BkSP3m1HJNWyUWrUf6GyI-Vy024dtrX9Qq_BOznJWbQVhHf5aA7x5AAoLHZ_PmzxbUlDQ7Go6FD7sgkoksZI4Cp77HZJMXXGVOrvvXJkpctTcuBZ2P-2filLmb29JIm0e4McOjeHQTV7XNGdzTZoyeSZcU5xTVFQK89e-SIPHKyaL7TAr_faBbTGzVryYfa2VFyKi7Z9gA";
const JWKS: &'static str = r#"{
 "keys": [
  {
   "kty": "RSA",
   "alg": "RS256",
   "use": "sig",
   "kid": "3f3ef9c7803cd0b8d75247ee0d31fdd5c2cf3812",
   "n": "xM3ZHCgrJLe8y0rBZUWHOS1pCpJ2PjM_gw0WI9D0rljoZ7zWQpEC5UwpWaJqqDKxokt-kKP9GYXILqEsZrQ86qXvRZDPrP39RUjMl3Yl0hE4PlTx3aXuSE8SYqy506yduKjHw3seQHBiqSkVdLXSXqsEKUUrtFEgUxwL5L0yU4N3uJcAWK-oka8RxQSFJEilX5UOH-Qmz4UEeIr7Ma8cdsjibUc6xC9SRJtblmAdDDA_-1aMAJuYH8tGYnpTftwKbaaD0btq0LIzrsFnLu2--jaBul4u0k0jukolnUP0XSqE6NEc0iHTCdbKHZN6LrKVZoUqncTAS7Qa6TbgN1-lHw",
   "e": "AQAB"
  },
  {
   "kty": "RSA",
   "alg": "RS256",
   "use": "sig",
   "kid": "a748e9f767159f667a0223318de0b2329e544362",
   "n": "tuhr2NvyeXM215R3uvFHL040vM_jQvynwALBRCO0GPy4TxicZmmIEr3nxRsv7c2KNTQUltaiImSocdUwCczQYtCokb9TIx225hqoD-3Mr6dmqkicMcdjqVgjShRzgcHX7c1ipi9r7YvePdOyQutr-SrT9qHFbC5B5CGrY5J3VsEq6wNVeFwto9utMbn7YmENMJp5ws3O3p7YkSrRAxdhzVefciUWD3E6PZrDlcNBUVjKX1lTWfpcfKAUVqUT0Kf2_A1QCqMr1Sjsj8PGeAMtslsK1N59QhwCAarNaEW1H02iFqSalJpgSlw-wN6XMyc1wnIBpstJrjnFwvN0jTe34w",
   "e": "AQAB"
  }
 ]
}"#;
const AUDIENCE: &'static str =
    "37772117408-qjqo9hca513pdcunumt7gk08ii6te8is.apps.googleusercontent.com";

struct TestKeyProvider;

#[cfg(feature = "blocking")]
impl KeyProvider for TestKeyProvider {
    fn get_key(&mut self, key_id: &str) -> Result<Option<JsonWebKey>, ()> {
        let set: JsonWebKeySet = serde_json::from_str(JWKS).unwrap();
        Ok(set.get_key(key_id))
    }
}

#[cfg(feature = "async")]
#[async_trait]
impl AsyncKeyProvider for TestKeyProvider {
    async fn get_key_async(&mut self, key_id: &str) -> Result<Option<JsonWebKey>, ()> {
        let set: JsonWebKeySet = serde_json::from_str(JWKS).unwrap();
        Ok(set.get_key(key_id))
    }
}

#[cfg(feature = "blocking")]
#[test]
pub fn decode_keys() {
    TestKeyProvider
        .get_key("3f3ef9c7803cd0b8d75247ee0d31fdd5c2cf3812")
        .unwrap();
    TestKeyProvider
        .get_key("a748e9f767159f667a0223318de0b2329e544362")
        .unwrap();
}

#[cfg(feature = "blocking")]
#[test]
pub fn test_client() {
    let client =
        Client::builder("37772117408-qjqo9hca513pdcunumt7gk08ii6te8is.apps.googleusercontent.com")
            .custom_key_provider(TestKeyProvider)
            .build();
    assert_eq!(client.verify_token(TOKEN).map(|_| ()), Err(Error::Expired));
}

#[cfg(feature = "blocking")]
#[test]
pub fn test_client_invalid_client_id() {
    let client = Client::builder("invalid client id")
        .custom_key_provider(TestKeyProvider)
        .build();
    let result = client.verify_token(TOKEN).map(|_| ());
    assert_eq!(result, Err(Error::InvalidToken))
}

#[cfg(feature = "blocking")]
#[test]
pub fn test_id_token() {
    let client = Client::builder(AUDIENCE)
        .custom_key_provider(TestKeyProvider)
        .unsafe_ignore_expiration()
        .build();
    let id_token = client
        .verify_id_token(TOKEN)
        .expect("id token should be valid");
    assert_eq!(id_token.get_claims().get_audience(), AUDIENCE);
    assert_eq!(id_token.get_payload().get_domain(), None);
    assert_eq!(id_token.get_payload().get_email(), "fuchsnj@gmail.com");
}

#[cfg(feature = "async")]
#[tokio::test]
async fn decode_keys_async() {
    TestKeyProvider
        .get_key_async("3f3ef9c7803cd0b8d75247ee0d31fdd5c2cf3812")
        .await
        .unwrap();
    TestKeyProvider
        .get_key_async("a748e9f767159f667a0223318de0b2329e544362")
        .await
        .unwrap();
}

#[cfg(feature = "async")]
#[tokio::test]
async fn test_client_async() {
    let client =
        Client::builder("37772117408-qjqo9hca513pdcunumt7gk08ii6te8is.apps.googleusercontent.com")
            .custom_key_provider(TestKeyProvider)
            .build();
    assert_eq!(
        client.verify_token_async(TOKEN).await.map(|_| ()),
        Err(Error::Expired)
    );
}

#[cfg(feature = "async")]
#[tokio::test]
async fn test_client_invalid_client_id_async() {
    let client = Client::builder("invalid client id")
        .custom_key_provider(TestKeyProvider)
        .build();
    let result = client.verify_token_async(TOKEN).await.map(|_| ());
    assert_eq!(result, Err(Error::InvalidToken))
}

#[cfg(feature = "async")]
#[tokio::test]
async fn test_id_token_async() {
    let client = Client::builder(AUDIENCE)
        .custom_key_provider(TestKeyProvider)
        .unsafe_ignore_expiration()
        .build();
    let id_token = client
        .verify_id_token_async(TOKEN)
        .await
        .expect("id token should be valid");
    assert_eq!(id_token.get_claims().get_audience(), AUDIENCE);
    assert_eq!(id_token.get_payload().get_domain(), None);
    assert_eq!(id_token.get_payload().get_email(), "fuchsnj@gmail.com");
}