summaryrefslogtreecommitdiff
path: root/src/keys.rs
diff options
context:
space:
mode:
authormo khan <mo@mokhan.ca>2025-06-09 17:27:57 -0600
committermo khan <mo@mokhan.ca>2025-06-09 17:27:57 -0600
commit50731865b1a22ab250e988aed2ea2bb8a18f9338 (patch)
tree2155fb783438b9c2d42bbe7cf2821f46d75d3a06 /src/keys.rs
parent72c2297eda4c18f75e7d8587773b36f3ac98b309 (diff)
test: add missing tests
Diffstat (limited to 'src/keys.rs')
-rw-r--r--src/keys.rs115
1 files changed, 115 insertions, 0 deletions
diff --git a/src/keys.rs b/src/keys.rs
index 6c25681..10c9697 100644
--- a/src/keys.rs
+++ b/src/keys.rs
@@ -21,6 +21,7 @@ pub struct KeyPair {
#[derive(Debug, Serialize)]
pub struct JwkKey {
pub kty: String,
+ #[serde(rename = "use")]
pub use_: String,
pub kid: String,
pub alg: String,
@@ -152,3 +153,117 @@ impl KeyManager {
});
}
}
+
+#[cfg(test)]
+mod tests {
+ use super::*;
+
+ #[test]
+ fn test_key_manager_creation() {
+ let manager = KeyManager::new().expect("Failed to create key manager");
+ assert!(manager.get_current_key().is_some());
+ assert_eq!(manager.keys.len(), 1);
+ }
+
+ #[test]
+ fn test_key_generation() {
+ let mut manager = KeyManager::new().expect("Failed to create key manager");
+ let initial_key_count = manager.keys.len();
+
+ let new_kid = manager.generate_new_key().expect("Failed to generate new key");
+ assert_eq!(manager.keys.len(), initial_key_count + 1);
+ assert_eq!(manager.current_key_id, Some(new_kid.clone()));
+ assert!(manager.get_key(&new_kid).is_some());
+ }
+
+ #[test]
+ fn test_jwks_generation() {
+ let manager = KeyManager::new().expect("Failed to create key manager");
+ let jwks = manager.get_jwks().expect("Failed to get JWKS");
+
+ assert_eq!(jwks.keys.len(), 1);
+ let key = &jwks.keys[0];
+ assert_eq!(key.kty, "RSA");
+ assert_eq!(key.use_, "sig");
+ assert_eq!(key.alg, "RS256");
+ assert!(!key.n.is_empty());
+ assert!(!key.e.is_empty());
+ assert!(!key.kid.is_empty());
+ }
+
+ #[test]
+ fn test_key_rotation() {
+ let mut manager = KeyManager::new().expect("Failed to create key manager");
+ let original_kid = manager.current_key_id.clone().unwrap();
+
+ manager.rotate_keys().expect("Failed to rotate keys");
+
+ let new_kid = manager.current_key_id.clone().unwrap();
+ assert_ne!(original_kid, new_kid);
+ assert_eq!(manager.keys.len(), 2); // Should have both old and new keys
+ assert!(manager.get_key(&original_kid).is_some());
+ assert!(manager.get_key(&new_kid).is_some());
+ }
+
+ #[test]
+ fn test_should_rotate_new_key() {
+ let manager = KeyManager::new().expect("Failed to create key manager");
+ // New key should not need rotation
+ assert!(!manager.should_rotate());
+ }
+
+ #[test]
+ fn test_should_rotate_old_key() {
+ let mut manager = KeyManager::new().expect("Failed to create key manager");
+
+ // Manually modify the current key's creation time to be old
+ if let Some(current_kid) = manager.current_key_id.clone() {
+ if let Some(key_pair) = manager.keys.get_mut(&current_kid) {
+ let old_time = SystemTime::now()
+ .duration_since(UNIX_EPOCH)
+ .unwrap()
+ .as_secs() - 86401; // 1 day + 1 second ago
+
+ // We need to recreate the key pair with the old timestamp
+ let mut old_key_pair = key_pair.clone();
+ old_key_pair.created_at = old_time;
+ manager.keys.insert(current_kid, old_key_pair);
+ }
+ }
+
+ // Should need rotation since key is older than rotation interval
+ assert!(manager.should_rotate());
+ }
+
+ #[test]
+ fn test_cleanup_old_keys() {
+ let mut manager = KeyManager::new().expect("Failed to create key manager");
+ let original_kid = manager.current_key_id.clone().unwrap();
+
+ // Generate a new key (so we have 2 keys)
+ manager.rotate_keys().expect("Failed to rotate keys");
+ assert_eq!(manager.keys.len(), 2);
+
+ // Cleanup with max_age 0 should remove old keys but keep current
+ manager.cleanup_old_keys(0);
+ assert_eq!(manager.keys.len(), 1);
+ assert!(manager.get_key(&original_kid).is_none());
+ assert!(manager.get_current_key().is_some());
+ }
+
+ #[test]
+ fn test_multiple_key_jwks() {
+ let mut manager = KeyManager::new().expect("Failed to create key manager");
+ manager.rotate_keys().expect("Failed to rotate keys");
+ manager.rotate_keys().expect("Failed to rotate keys");
+
+ let jwks = manager.get_jwks().expect("Failed to get JWKS");
+ assert_eq!(jwks.keys.len(), 3); // Should have 3 keys
+
+ // All keys should have unique key IDs
+ let mut kids: Vec<String> = jwks.keys.iter().map(|k| k.kid.clone()).collect();
+ kids.sort();
+ kids.dedup();
+ assert_eq!(kids.len(), 3); // All should be unique
+ }
+}