Added PASETO test vectors for v1.public

scottbrady91 · May 16, 2020 · 795e1b3 · 795e1b3
1 parent 73945e5
commit 795e1b3
Showing 1 changed file with 87 additions and 2 deletions.
diff --git a/test/ScottBrady.IdentityModel.Tests/Tokens/Paseto/PasetoTestVectors.cs b/test/ScottBrady.IdentityModel.Tests/Tokens/Paseto/PasetoTestVectors.cs
@@ -1,14 +1,101 @@
 using System;
+using System.IO;
+using System.Security.Cryptography;
 using FluentAssertions;
 using Microsoft.IdentityModel.Tokens;
 using Org.BouncyCastle.Crypto.Parameters;
+using Org.BouncyCastle.OpenSsl;
+using Org.BouncyCastle.Security;
 using ScottBrady.IdentityModel.Tokens;
 using Xunit;
 
 namespace ScottBrady.IdentityModel.Tests.Tokens.Paseto
 {
     public class PasetoTestVectors
     {
+        [Fact]
+        public void ValidateToken_V1_S_1()
+        {
+            const string token = "v1.public.eyJkYXRhIjoidGhpcyBpcyBhIHNpZ25lZCBtZXNzYWdlIiw" +
+                                 "iZXhwIjoiMjAxOS0wMS0wMVQwMDowMDowMCswMDowMCJ9cIZKahKeGM5k" +
+                                 "iAS_4D70Qbz9FIThZpxetJ6n6E6kXP_119SvQcnfCSfY_gG3D0Q2v7FEt" +
+                                 "m2Cmj04lE6YdgiZ0RwA41WuOjXq7zSnmmHK9xOSH6_2yVgt207h1_LphJ" +
+                                 "zVztmZzq05xxhZsV3nFPm2cCu8oPceWy-DBKjALuMZt_Xj6hWFFie96Sf" +
+                                 "Q6i85lOsTX8Kc6SQaG-3CgThrJJ6W9DC-YfQ3lZ4TJUoY3QNYdtEgAvp1" +
+                                 "QuWWK6xmIb8BwvkBPej5t88QUb7NcvZ15VyNw3qemQGn2ITSdpdDgwMtp" +
+                                 "flZOeYdtuxQr1DSGO2aQyZl7s0WYn1IjdQFx6VjSQ4yfw";
+            const string pem = "-----BEGIN PUBLIC KEY-----\n" +
+                               "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaTgTt53ph3p\n" +
+                               "5GHgwoGWwz5hRfWXSQA08NCOwe0FEgALWos9GCjNFCd723nCHxBtN1qd\n" +
+                               "74MSh/uN88JPIbwxKheDp4kxo4YMN5trPaF0e9G6Bj1N02HnanxFLW+g\n" +
+                               "mLbgYO/SZYfWF/M8yLBcu5Y1Ot0ZxDDDXS9wIQTtBE0ne3YbxgZJAZTU\n" +
+                               "5XqyQ1DxdzYyC5lF6yBaR5UQtCYTnXAApVRuUI2Sd6L1E2vl9bSBumZ5\n" +
+                               "IpNxkRnAwIMjeTJB/0AIELh0mE5vwdihOCbdV6alUyhKC1+1w/FW6HWc\n" +
+                               "p/JG1kKC8DPIidZ78Bbqv9YFzkAbNni5eSBOsXVBKG78Zsc8owIDAQAB\n" +
+                               "-----END PUBLIC KEY-----";
+            // payload = "{ data: \"this is a signed message\", exp: \"2019-01-01T00:00:00+00:00\" }";
+
+            var reader = new PemReader(new StringReader(pem));
+            var pemObject = (RsaKeyParameters) reader.ReadObject();
+
+            var rsaKey = RSA.Create(DotNetUtilities.ToRSAParameters(pemObject));
+
+            var handler = new PasetoTokenHandler();
+            var result = handler.ValidateToken(token, new TokenValidationParameters
+            {
+                ValidateIssuer = false,
+                ValidateAudience = false,
+                ValidateLifetime = false,
+
+                IssuerSigningKey = new RsaSecurityKey(rsaKey)
+            });
+
+            result.IsValid.Should().BeTrue();
+        }
+
+        [Fact]
+        public void ValidateToken_V1_S_2()
+        {
+            const string token = "v1.public.eyJkYXRhIjoidGhpcyBpcyBhIHNpZ25lZCBtZXNzYWdlIiw" +
+                                 "iZXhwIjoiMjAxOS0wMS0wMVQwMDowMDowMCswMDowMCJ9sBTIb0J_4mis" +
+                                 "AuYc4-6P5iR1rQighzktpXhJ8gtrrp2MqSSDkbb8q5WZh3FhUYuW_rg2X" +
+                                 "8aflDlTWKAqJkM3otjYwtmfwfOhRyykxRL2AfmIika_A-_MaLp9F0iw4S" +
+                                 "1JetQQDV8GUHjosd87TZ20lT2JQLhxKjBNJSwWue8ucGhTgJcpOhXcthq" +
+                                 "az7a2yudGyd0layzeWziBhdQpoBR6ryTdtIQX54hP59k3XCIxuYbB9qJM" +
+                                 "pixiPAEKBcjHT74sA-uukug9VgKO7heWHwJL4Rl9ad21xyNwaxAnwAJ7C" +
+                                 "0fN5oGv8Rl0dF11b3tRmsmbDoIokIM0Dba29x_T3YzOyg.eyJraWQiOiJ" +
+                                 "kWWtJU3lseFFlZWNFY0hFTGZ6Rjg4VVpyd2JMb2xOaUNkcHpVSEd3OVVx" +
+                                 "biJ9";
+            const string pem = "-----BEGIN PUBLIC KEY-----\n" +
+                               "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaTgTt53ph3p\n" +
+                               "5GHgwoGWwz5hRfWXSQA08NCOwe0FEgALWos9GCjNFCd723nCHxBtN1qd\n" +
+                               "74MSh/uN88JPIbwxKheDp4kxo4YMN5trPaF0e9G6Bj1N02HnanxFLW+g\n" +
+                               "mLbgYO/SZYfWF/M8yLBcu5Y1Ot0ZxDDDXS9wIQTtBE0ne3YbxgZJAZTU\n" +
+                               "5XqyQ1DxdzYyC5lF6yBaR5UQtCYTnXAApVRuUI2Sd6L1E2vl9bSBumZ5\n" +
+                               "IpNxkRnAwIMjeTJB/0AIELh0mE5vwdihOCbdV6alUyhKC1+1w/FW6HWc\n" +
+                               "p/JG1kKC8DPIidZ78Bbqv9YFzkAbNni5eSBOsXVBKG78Zsc8owIDAQAB\n" +
+                               "-----END PUBLIC KEY-----";
+            // {"data":"this is a signed message", "exp":"2019-01-01T00:00:00+00:00"}
+            // footer = {"kid":"dYkISylxQeecEcHELfzF88UZrwbLolNiCdpzUHGw9Uqn"}
+
+            var reader = new PemReader(new StringReader(pem));
+            var pemObject = (RsaKeyParameters) reader.ReadObject();
+
+            var rsaKey = RSA.Create(DotNetUtilities.ToRSAParameters(pemObject));
+
+            var handler = new PasetoTokenHandler();
+            var result = handler.ValidateToken(token, new TokenValidationParameters
+            {
+                ValidateIssuer = false,
+                ValidateAudience = false,
+                ValidateLifetime = false,
+
+                IssuerSigningKey = new RsaSecurityKey(rsaKey)
+            });
+
+            result.IsValid.Should().BeTrue();
+        }
+
         [Fact]
         public void ValidateToken_V2_S_1()
         {
@@ -37,8 +124,6 @@ public void ValidateToken_V2_S_2()
             // payload = {"data":"this is a signed message", "exp":"2019-01-01T00:00:00+00:00"}
             // footer = {"kid":"zVhMiPBP9fRf2snEcT7gFTioeA9COcNy9DfgL1W60haN"}
 
-            var base64String = Convert.ToBase64String(HexToBytes(publicKeyHex));
-
             var handler = new PasetoTokenHandler();
             var result = handler.ValidateToken(token, new TokenValidationParameters
             {