stsrequest_test.go

package stsclient

import (
	"testing"
	"crypto"
	"crypto/tls"
	"crypto/x509"
	"crypto/rsa"
	"encoding/pem"
	"encoding/base64"
 	"gotest.tools/assert"
	"io/ioutil"
  	dsig "github.com/russellhaering/goxmldsig"
	etree "github.com/beevik/etree"
)

func TestGetStsRequestNoSignature(t *testing.T) {

	// Given
        subject, _ := createRequestFactory()


	// When
	request, err := subject.CreateStsRequest("audience", nil, nil, false)

	// Then
	soapStr, _ := request.SoapEnvelope.WriteToString()
	assert.NilError(t, err, "couldn't read testdata authenticate_body_first")
	assert.Equal(t, soapStr, soapStr)
}

func TestGetStsRequestSigned(t *testing.T) {

        // Given
        subject, _ := createRequestFactory()

        // When
        request, err := subject.CreateStsRequest("audience", nil, nil, true)

	// Then
	soapStr, _ := request.SoapEnvelope.WriteToString()
	assert.NilError(t, err, "Error creating request")
	assert.Equal(t, soapStr, soapStr)
}

func createRequestFactory() (*StsRequestFactory, error) {

	certFileContent, err := ioutil.ReadFile("./testdata/medcom.cer")
        if (err != nil) {
                return nil, err
        }
        certBlock, _ := pem.Decode([]byte(certFileContent))
	cert, err := x509.ParseCertificate(certBlock.Bytes)
        if (err != nil) {
                return nil, err
        }
        rsaPublicKey := cert.PublicKey.(*rsa.PublicKey)

        clientKeyPair, _ := tls.LoadX509KeyPair("./testdata/medcom.cer", "./testdata/medcom.pem")
        keyStore := dsig.TLSCertKeyStore(clientKeyPair)

        subject, err := NewStsRequestFactory(keyStore, rsaPublicKey, "https://test")
	return subject, err
}

///////////////////////////////////////////////
//
// Ikke rigtige tests, men diverse kodestumper
//
///////////////////////////////////////////////
func TestFormatCert(t *testing.T) {

        // Given
	certFileContent, _ := ioutil.ReadFile("./testdata/medcom.cer")
	certBlock, _ := pem.Decode([]byte(certFileContent))
        cert, _ := x509.ParseCertificate(certBlock.Bytes)

	rsaPublicKey := cert.PublicKey.(*rsa.PublicKey)

	assert.Equal(t, base64.StdEncoding.EncodeToString(rsaPublicKey.N.Bytes()), base64.StdEncoding.EncodeToString(rsaPublicKey.N.Bytes()))
}

func TestSignEnveloped(t *testing.T) {

	keyPair, _ := tls.LoadX509KeyPair("./testdata/medcom.cer", "./testdata/medcom.pem")
        keyStore := dsig.TLSCertKeyStore(keyPair)

        doc := etree.NewDocument()
        doc.CreateProcInst("xml", `version="1.0" encoding="UTF-8"`)
        envelope := doc.CreateElement("Envelope")
      	envelope.CreateElement("Header")
	body := envelope.CreateElement("Body")
	body.CreateAttr("ID", "_id9837432984298")

       	ctx := &dsig.SigningContext{
                Hash:          crypto.SHA256,
                KeyStore:      keyStore,
                IdAttribute:   "ID",
                Prefix:        dsig.DefaultPrefix,
                Canonicalizer: dsig.MakeC14N11Canonicalizer(),
        }
	signed, _ := ctx.SignEnveloped(body)

	newDoc := etree.NewDocument()
        newDoc.CreateProcInst("xml", `version="1.0" encoding="UTF-8"`)
        newEnvelope := newDoc.CreateElement("Envelope")
        newEnvelope.CreateElement("Header")
	newEnvelope.AddChild(signed)

	newDoc.WriteToString()
}

func TestConstructSignature(t *testing.T) {

        keyPair, _ := tls.LoadX509KeyPair("./testdata/medcom.cer", "./testdata/medcom.pem")
        keyStore := dsig.TLSCertKeyStore(keyPair)

        doc := etree.NewDocument()
        doc.CreateProcInst("xml", `version="1.0" encoding="UTF-8"`)
        envelope := doc.CreateElement("Envelope")
        header := envelope.CreateElement("Header")
        body := envelope.CreateElement("Body")
        body.CreateAttr("ID", "_id9837432984298")

        ctx := &dsig.SigningContext{
                Hash:          crypto.SHA256,
                KeyStore:      keyStore,
                IdAttribute:   "ID",
                Prefix:        dsig.DefaultPrefix,
                Canonicalizer: dsig.MakeC14N11Canonicalizer(),
        }

	signed, _ := ctx.ConstructSignature(body, false)
	header.AddChild(signed)

        str, _  := doc.WriteToString()
	assert.Equal(t, str, str)
}