More functional tests. All passing.

Author: sebadoom

package.json

@@ -16,6 +16,7 @@
     "chai-arrays": "^2.0.0",
     "chai-as-promised": "^7.1.1",
     "codemirror": "^5.33.0",
+    "express": "^4.16.2",
     "flipclock": "^0.7.8",
     "grunt": "^1.0.1",
     "grunt-cli": "^1.2.0",

test/functional/editor.js

@@ -2,9 +2,13 @@ const chai = require('chai');
 const chaiAsPromised = require('chai-as-promised');
 const chaiArrays = require('chai-arrays');
 
+const express = require('express');
+const jsrsasign = require('jsrsasign');
+
 const utils = require('./utils.js');
 const tokens = require('./tokens.js');
 const defaultTokens = require('./default-tokens.js');
+const jwks = require('./jwks.json');
 
 const isVisible = utils.isVisible;
 
@@ -454,16 +458,135 @@ describe('Editor', function() {
     });
 
     describe('Should download public-keys when possible', function() {
-      before(function() {
+      before(async function() {
+        this.app = express();
+
+        this.app.get('/.well-known/jwks.json', (req, res) => {
+          res.set('Access-Control-Allow-Origin', '*');
+          res.json(jwks);
+        });
+
+        this.server = this.app.listen(3000);
 
+        await this.page.select('#algorithm-select', 'RS256');
+      });
+
+      beforeEach(async function() {
+        const publicKeyInput = await this.page.$('textarea[name="public-key"]');
+        await publicKeyInput.click();
+        await this.page.keyboard.down('ControlLeft');
+        await this.page.keyboard.press('KeyA');
+        await this.page.keyboard.up('ControlLeft');
+        await this.page.keyboard.press('Delete');
       });
 
       after(function() {
+        this.server.close();
+      });
+
+      it('iss URL + .well-known', async function() {
+        this.timeout(20000);
+
+        const token = jsrsasign.jws.JWS.sign(null, JSON.stringify({
+          alg: 'RS256',
+          typ: 'JWT',
+          kid: '1'
+        }), JSON.stringify({
+          sub: 'test',
+          iss: 'http://localhost:3000/'
+        }), defaultTokens.rs256.privateKey);
+
+        await this.page.click('.js-input');
+        await this.page.keyboard.down('ControlLeft');
+        await this.page.keyboard.press('KeyA');
+        await this.page.keyboard.up('ControlLeft');
+        await this.page.keyboard.type(token, { 
+          delay: 5         
+        });
 
-      });
+        await this.page.waitFor(2000);
+
+        const publicKey = await this.page.$eval('textarea[name="public-key"]', 
+          publicKeyElement => publicKeyElement.value);
+
+        expect(publicKey).to.include(jwks.keys[0].x5c[0]);
+
+        const valid = await this.page.$eval('.validation-status', status => {
+          return status.classList.contains('valid-token') && 
+                status.textContent.indexOf('verified') !== -1;
+        });
+    
+        expect(valid).to.be.true;
+      });
+
+      it('jku', async function() {
+        this.timeout(20000);
+
+        const token = jsrsasign.jws.JWS.sign(null, JSON.stringify({
+          alg: 'RS256',
+          typ: 'JWT',
+          kid: '1',
+          jku: 'http://localhost:3000/.well-known/jwks.json'
+        }), JSON.stringify({
+          sub: 'test'
+        }), defaultTokens.rs256.privateKey);
+
+        await this.page.click('.js-input');
+        await this.page.keyboard.down('ControlLeft');
+        await this.page.keyboard.press('KeyA');
+        await this.page.keyboard.up('ControlLeft');
+        await this.page.keyboard.type(token, { 
+          delay: 5         
+        });
 
-      it('iss URL + .well-known');
-      it('jku');
+        await this.page.waitFor(2000);
+
+        const publicKey = await this.page.$eval('textarea[name="public-key"]', 
+          publicKeyElement => publicKeyElement.value);
+
+        expect(publicKey).to.include(jwks.keys[0].x5c[0]);
+
+        const valid = await this.page.$eval('.validation-status', status => {
+          return status.classList.contains('valid-token') && 
+                status.textContent.indexOf('verified') !== -1;
+        });
+    
+        expect(valid).to.be.true;
+      });
+
+      it('x5c', async function() {
+        this.timeout(35000);
+
+        const token = jsrsasign.jws.JWS.sign(null, JSON.stringify({
+          alg: 'RS256',
+          typ: 'JWT',
+          x5c: jwks.keys[0].x5c[0]
+        }), JSON.stringify({
+          sub: 'test'
+        }), defaultTokens.rs256.privateKey);
+
+        await this.page.click('.js-input');
+        await this.page.keyboard.down('ControlLeft');
+        await this.page.keyboard.press('KeyA');
+        await this.page.keyboard.up('ControlLeft');
+        await this.page.keyboard.type(token, { 
+          delay: 5         
+        });
+
+        await this.page.waitFor(2000);
+
+        const publicKey = await this.page.$eval('textarea[name="public-key"]', 
+          publicKeyElement => publicKeyElement.value);
+
+        expect(publicKey).to.include(jwks.keys[0].x5c[0]);
+
+        const valid = await this.page.$eval('.validation-status', status => {
+          return status.classList.contains('valid-token') && 
+                status.textContent.indexOf('verified') !== -1;
+        });
+    
+        expect(valid).to.be.true;
+      });
     });    
 
     it('Clears the token when the header is edited and there ' +     

test/functional/jwks.json

@@ -0,0 +1,14 @@
+{
+  "keys": [
+    {
+      "alg": "RS256",
+      "kty": "RSA",
+      "use": "sig",
+      "x5c": [
+        "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"
+      ],
+      "kid": "1",
+      "x5t": "1"
+    }
+  ]
+}