diff options
| author | mo khan <mo@mokhan.ca> | 2025-06-09 17:27:57 -0600 |
|---|---|---|
| committer | mo khan <mo@mokhan.ca> | 2025-06-09 17:27:57 -0600 |
| commit | 50731865b1a22ab250e988aed2ea2bb8a18f9338 (patch) | |
| tree | 2155fb783438b9c2d42bbe7cf2821f46d75d3a06 /src/keys.rs | |
| parent | 72c2297eda4c18f75e7d8587773b36f3ac98b309 (diff) | |
test: add missing tests
Diffstat (limited to 'src/keys.rs')
| -rw-r--r-- | src/keys.rs | 115 |
1 files changed, 115 insertions, 0 deletions
diff --git a/src/keys.rs b/src/keys.rs index 6c25681..10c9697 100644 --- a/src/keys.rs +++ b/src/keys.rs @@ -21,6 +21,7 @@ pub struct KeyPair { #[derive(Debug, Serialize)] pub struct JwkKey { pub kty: String, + #[serde(rename = "use")] pub use_: String, pub kid: String, pub alg: String, @@ -152,3 +153,117 @@ impl KeyManager { }); } } + +#[cfg(test)] +mod tests { + use super::*; + + #[test] + fn test_key_manager_creation() { + let manager = KeyManager::new().expect("Failed to create key manager"); + assert!(manager.get_current_key().is_some()); + assert_eq!(manager.keys.len(), 1); + } + + #[test] + fn test_key_generation() { + let mut manager = KeyManager::new().expect("Failed to create key manager"); + let initial_key_count = manager.keys.len(); + + let new_kid = manager.generate_new_key().expect("Failed to generate new key"); + assert_eq!(manager.keys.len(), initial_key_count + 1); + assert_eq!(manager.current_key_id, Some(new_kid.clone())); + assert!(manager.get_key(&new_kid).is_some()); + } + + #[test] + fn test_jwks_generation() { + let manager = KeyManager::new().expect("Failed to create key manager"); + let jwks = manager.get_jwks().expect("Failed to get JWKS"); + + assert_eq!(jwks.keys.len(), 1); + let key = &jwks.keys[0]; + assert_eq!(key.kty, "RSA"); + assert_eq!(key.use_, "sig"); + assert_eq!(key.alg, "RS256"); + assert!(!key.n.is_empty()); + assert!(!key.e.is_empty()); + assert!(!key.kid.is_empty()); + } + + #[test] + fn test_key_rotation() { + let mut manager = KeyManager::new().expect("Failed to create key manager"); + let original_kid = manager.current_key_id.clone().unwrap(); + + manager.rotate_keys().expect("Failed to rotate keys"); + + let new_kid = manager.current_key_id.clone().unwrap(); + assert_ne!(original_kid, new_kid); + assert_eq!(manager.keys.len(), 2); // Should have both old and new keys + assert!(manager.get_key(&original_kid).is_some()); + assert!(manager.get_key(&new_kid).is_some()); + } + + #[test] + fn test_should_rotate_new_key() { + let manager = KeyManager::new().expect("Failed to create key manager"); + // New key should not need rotation + assert!(!manager.should_rotate()); + } + + #[test] + fn test_should_rotate_old_key() { + let mut manager = KeyManager::new().expect("Failed to create key manager"); + + // Manually modify the current key's creation time to be old + if let Some(current_kid) = manager.current_key_id.clone() { + if let Some(key_pair) = manager.keys.get_mut(¤t_kid) { + let old_time = SystemTime::now() + .duration_since(UNIX_EPOCH) + .unwrap() + .as_secs() - 86401; // 1 day + 1 second ago + + // We need to recreate the key pair with the old timestamp + let mut old_key_pair = key_pair.clone(); + old_key_pair.created_at = old_time; + manager.keys.insert(current_kid, old_key_pair); + } + } + + // Should need rotation since key is older than rotation interval + assert!(manager.should_rotate()); + } + + #[test] + fn test_cleanup_old_keys() { + let mut manager = KeyManager::new().expect("Failed to create key manager"); + let original_kid = manager.current_key_id.clone().unwrap(); + + // Generate a new key (so we have 2 keys) + manager.rotate_keys().expect("Failed to rotate keys"); + assert_eq!(manager.keys.len(), 2); + + // Cleanup with max_age 0 should remove old keys but keep current + manager.cleanup_old_keys(0); + assert_eq!(manager.keys.len(), 1); + assert!(manager.get_key(&original_kid).is_none()); + assert!(manager.get_current_key().is_some()); + } + + #[test] + fn test_multiple_key_jwks() { + let mut manager = KeyManager::new().expect("Failed to create key manager"); + manager.rotate_keys().expect("Failed to rotate keys"); + manager.rotate_keys().expect("Failed to rotate keys"); + + let jwks = manager.get_jwks().expect("Failed to get JWKS"); + assert_eq!(jwks.keys.len(), 3); // Should have 3 keys + + // All keys should have unique key IDs + let mut kids: Vec<String> = jwks.keys.iter().map(|k| k.kid.clone()).collect(); + kids.sort(); + kids.dedup(); + assert_eq!(kids.len(), 3); // All should be unique + } +} |
