org.picketbox.test.json.JSONSecurityTestCase.java Source code

Introduction

Here is the source code for org.picketbox.test.json.JSONSecurityTestCase.java

Source

/*
 * JBoss, Home of Professional Open Source.
 * Copyright 2012, Red Hat, Inc., and individual contributors
 * as indicated by the @author tags. See the copyright.txt file in the
 * distribution for a full listing of individual contributors.
 *
 * This is free software; you can redistribute it and/or modify it
 * under the terms of the GNU Lesser General Public License as
 * published by the Free Software Foundation; either version 2.1 of
 * the License, or (at your option) any later version.
 *
 * This software is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this software; if not, write to the Free
 * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
 * 02110-1301 USA, or see the FSF site: http://www.fsf.org.
 */
package org.picketbox.test.json;

import static org.junit.Assert.assertEquals;
import static org.junit.Assert.assertNotNull;

import java.io.File;
import java.io.FileReader;
import java.net.URL;
import java.security.interfaces.RSAPublicKey;

import org.json.JSONObject;
import org.json.JSONTokener;
import org.junit.Test;
import org.picketbox.json.PicketBoxJSONConstants;
import org.picketbox.json.key.JSONWebKey;
import org.picketbox.json.key.RSAKey;
import org.picketbox.json.sig.JSONWebSignature;
import org.picketbox.json.sig.JSONWebSignatureHeader;

/**
 * Unit test for JSON Security
 *
 * @author anil saldhana
 * @since Jul 24, 2012
 */
public class JSONSecurityTestCase {
    @Test
    public void parseJSONWebKey() throws Exception {
        URL url = getClass().getClassLoader().getResource("json/jsonWebKey.json");
        assertNotNull(url);
        File file = new File(url.toURI());

        FileReader reader = new FileReader(file);
        JSONTokener tokener = new JSONTokener(reader);
        JSONObject json = new JSONObject(tokener);
        assertNotNull(json);
        System.out.println(json.toString());

        JSONWebKey webKey = new JSONWebKey();
        webKey.parse(json);
        assertEquals(2, webKey.getKeys().length());
        JSONObject keyObj = webKey.getKey("2011-04-29");
        RSAKey rsa = new RSAKey();
        rsa.parse(keyObj);

        RSAPublicKey publicKey = rsa.convertToPublicKey();
        assertNotNull(publicKey);

        RSAKey convertedKey = RSAKey.convert(publicKey);
        assertNotNull(convertedKey);
    }

    @Test
    public void testJSONWebSignature() throws Exception {
        JSONWebSignature sig = new JSONWebSignature();
        String text = "{\"iss\":\"joe\", \"exp\":1300819380, \"http://example.com/is_root\":true}";

        JSONObject payload = new JSONObject(text);

        sig.setPayload(payload);
        JSONWebSignatureHeader header = new JSONWebSignatureHeader(PicketBoxJSONConstants.COMMON.HMAC_SHA_256);
        sig.setHeader(header);

        String encodedString = sig.encode();

        System.out.println(encodedString);
        JSONWebSignature decodedString = JSONWebSignature.decode(encodedString);
        assertNotNull(decodedString);
    }
}