com.vmware.identity.rest.core.test.RequestSignerTest.java Source code

Introduction

Here is the source code for com.vmware.identity.rest.core.test.RequestSignerTest.java

Source

/*
 *  Copyright (c) 2012-2015 VMware, Inc.  All Rights Reserved.
 *
 *  Licensed under the Apache License, Version 2.0 (the "License"); you may not
 *  use this file except in compliance with the License.  You may obtain a copy
 *  of the License at http://www.apache.org/licenses/LICENSE-2.0
 *
 *  Unless required by applicable law or agreed to in writing, software
 *  distributed under the License is distributed on an "AS IS" BASIS, without
 *  warranties or conditions of any kind, EITHER EXPRESS OR IMPLIED.  See the
 *  License for the specific language governing permissions and limitations
 *  under the License.
 */
package com.vmware.identity.rest.core.test;

import static org.junit.Assert.assertFalse;
import static org.junit.Assert.assertTrue;

import java.net.URI;
import java.net.URISyntaxException;
import java.security.InvalidKeyException;
import java.security.KeyPair;
import java.security.KeyPairGenerator;
import java.security.NoSuchAlgorithmException;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.security.SignatureException;
import java.util.Date;

import org.apache.commons.codec.DecoderException;
import org.junit.BeforeClass;
import org.junit.Test;

import com.vmware.identity.rest.core.util.RequestSigner;

public class RequestSignerTest {

    private static PublicKey publicKey;
    private static PrivateKey privateKey;

    @BeforeClass
    public static void setup() throws NoSuchAlgorithmException {
        KeyPairGenerator generator = KeyPairGenerator.getInstance("RSA");
        generator.initialize(2048);

        KeyPair pair = generator.generateKeyPair();
        publicKey = pair.getPublic();
        privateKey = pair.getPrivate();
    }

    @Test
    public void testSigning() throws NoSuchAlgorithmException, URISyntaxException, InvalidKeyException,
            SignatureException, DecoderException {
        String md5 = RequestSigner.computeMD5("this is an entity");
        Date date = new Date();
        URI uri = new URI("http://localhost/");

        String stringToSign = RequestSigner.createSigningString("GET", md5, "application/json; charset=UTF-8", date,
                uri);

        String signedRequestHex = RequestSigner.sign(stringToSign, privateKey);

        assertTrue("Signature was not verified", RequestSigner.verify(signedRequestHex, stringToSign, publicKey));
    }

    @Test
    public void testSigning_BadURI() throws NoSuchAlgorithmException, URISyntaxException, InvalidKeyException,
            SignatureException, DecoderException {
        String md5 = RequestSigner.computeMD5("this is an entity");
        Date date = new Date();
        URI uri = new URI("http://localhost/");
        URI badUri = new URI("http://junkhost/");

        String stringToSign = RequestSigner.createSigningString("GET", md5, "application/json; charset=UTF-8", date,
                uri);
        String badStringToSign = RequestSigner.createSigningString("GET", md5, "application/json; charset=UTF-8",
                date, badUri);

        String signedRequestHex = RequestSigner.sign(stringToSign, privateKey);

        assertFalse("Signature was verified", RequestSigner.verify(signedRequestHex, badStringToSign, publicKey));
    }

    @Test
    public void testSigning_BadDate() throws NoSuchAlgorithmException, URISyntaxException, InvalidKeyException,
            SignatureException, DecoderException {
        String md5 = RequestSigner.computeMD5("this is an entity");
        Date date = new Date();
        Date badDate = new Date(date.getTime() + 1000);
        URI uri = new URI("http://localhost/");

        String stringToSign = RequestSigner.createSigningString("GET", md5, "application/json; charset=UTF-8", date,
                uri);
        String badStringToSign = RequestSigner.createSigningString("GET", md5, "application/json; charset=UTF-8",
                badDate, uri);

        String signedRequestHex = RequestSigner.sign(stringToSign, privateKey);

        assertFalse("Signature was verified", RequestSigner.verify(signedRequestHex, badStringToSign, publicKey));
    }

    @Test
    public void testSigning_BadContentType() throws NoSuchAlgorithmException, URISyntaxException,
            InvalidKeyException, SignatureException, DecoderException {
        String md5 = RequestSigner.computeMD5("this is an entity");
        Date date = new Date();
        URI uri = new URI("http://localhost/");

        String stringToSign = RequestSigner.createSigningString("GET", md5, "application/json; charset=UTF-8", date,
                uri);
        String badStringToSign = RequestSigner.createSigningString("GET", md5, "application/xml", date, uri);

        String signedRequestHex = RequestSigner.sign(stringToSign, privateKey);

        assertFalse("Signature was verified", RequestSigner.verify(signedRequestHex, badStringToSign, publicKey));
    }

    @Test
    public void testSigning_BadMD5() throws NoSuchAlgorithmException, URISyntaxException, InvalidKeyException,
            SignatureException, DecoderException {
        String md5 = RequestSigner.computeMD5("this is an entity");
        String badMd5 = RequestSigner.computeMD5("bad entity");
        Date date = new Date();
        URI uri = new URI("http://localhost/");

        String stringToSign = RequestSigner.createSigningString("GET", md5, "application/json; charset=UTF-8", date,
                uri);
        String badStringToSign = RequestSigner.createSigningString("GET", badMd5, "application/json; charset=UTF-8",
                date, uri);

        String signedRequestHex = RequestSigner.sign(stringToSign, privateKey);

        assertFalse("Signature was verified", RequestSigner.verify(signedRequestHex, badStringToSign, publicKey));
    }

    @Test
    public void testSigning_BadMethod() throws NoSuchAlgorithmException, URISyntaxException, InvalidKeyException,
            SignatureException, DecoderException {
        String md5 = RequestSigner.computeMD5("this is an entity");
        Date date = new Date();
        URI uri = new URI("http://localhost/");

        String stringToSign = RequestSigner.createSigningString("GET", md5, "application/json; charset=UTF-8", date,
                uri);
        String badStringToSign = RequestSigner.createSigningString("POST", md5, "application/json; charset=UTF-8",
                date, uri);

        String signedRequestHex = RequestSigner.sign(stringToSign, privateKey);

        assertFalse("Signature was verified", RequestSigner.verify(signedRequestHex, badStringToSign, publicKey));
    }

}