90 lines
No EOL
3 KiB
C#
90 lines
No EOL
3 KiB
C#
using System.Security.Cryptography;
|
|
using Iceshrimp.Backend.Core.Federation.ActivityStreams;
|
|
using Iceshrimp.Backend.Core.Federation.ActivityStreams.Types;
|
|
using Iceshrimp.Backend.Core.Federation.Cryptography;
|
|
using Newtonsoft.Json.Linq;
|
|
|
|
namespace Iceshrimp.Tests.Cryptography;
|
|
|
|
[TestClass]
|
|
public class LdSignatureTests {
|
|
private readonly ASActor _actor = MockObjects.ASActor;
|
|
private readonly RSA _keypair = MockObjects.Keypair;
|
|
private JArray _expanded = null!;
|
|
private JObject _signed = null!;
|
|
|
|
[TestInitialize]
|
|
public async Task Initialize() {
|
|
_expanded = LdHelpers.Expand(_actor)!;
|
|
_signed = await LdSignature.Sign(_expanded, _keypair.ExportRSAPrivateKeyPem(), _actor.Id + "#main-key");
|
|
|
|
_expanded.Should().NotBeNull();
|
|
_signed.Should().NotBeNull();
|
|
}
|
|
|
|
[TestMethod]
|
|
public async Task RoundtripTest() {
|
|
var verify = await LdSignature.Verify(_signed, _keypair.ExportRSAPublicKeyPem());
|
|
verify.Should().BeTrue();
|
|
}
|
|
|
|
[TestMethod]
|
|
public async Task InvalidKeyTest() {
|
|
var rsa = RSA.Create();
|
|
var verify = await LdSignature.Verify(_signed, rsa.ExportRSAPublicKeyPem());
|
|
verify.Should().BeFalse();
|
|
}
|
|
|
|
[TestMethod]
|
|
public async Task InvalidDataTest() {
|
|
var data = (_signed.DeepClone() as JObject)!;
|
|
data.Should().NotBeNull();
|
|
|
|
data!.Add("https://example.org/ns#test", JToken.FromObject("value"));
|
|
var expanded = LdHelpers.Expand(data)!;
|
|
expanded.Should().NotBeNull();
|
|
|
|
var verify = await LdSignature.Verify(expanded, _keypair.ExportRSAPublicKeyPem());
|
|
verify.Should().BeFalse();
|
|
}
|
|
|
|
[TestMethod]
|
|
public async Task MissingSignatureTest() {
|
|
var data = (_signed.DeepClone() as JObject)!;
|
|
data.Should().NotBeNull();
|
|
|
|
data.Remove("https://w3id.org/security#signature");
|
|
var verify = await LdSignature.Verify(data, _keypair.ExportRSAPublicKeyPem());
|
|
verify.Should().BeFalse();
|
|
}
|
|
|
|
[TestMethod]
|
|
public async Task InvalidSignatureTest() {
|
|
var data = (_signed.DeepClone() as JObject)!;
|
|
data.Should().NotBeNull();
|
|
|
|
var signature =
|
|
data["https://w3id.org/security#signature"]?[0]?["https://w3id.org/security#signatureValue"]?[0]?["@value"];
|
|
signature.Should().NotBeNull();
|
|
|
|
data["https://w3id.org/security#signature"]![0]!["https://w3id.org/security#signatureValue"]![0]!["@value"] +=
|
|
"test";
|
|
await Assert.ThrowsExceptionAsync<FormatException>(async () =>
|
|
await LdSignature.Verify(data,
|
|
_keypair.ExportRSAPublicKeyPem()));
|
|
}
|
|
|
|
[TestMethod]
|
|
public async Task InvalidSignatureOptionsTest() {
|
|
var data = (_signed.DeepClone() as JObject)!;
|
|
data.Should().NotBeNull();
|
|
|
|
var creator =
|
|
data["https://w3id.org/security#signature"]?[0]?["http://purl.org/dc/terms/creator"]?[0]?["@value"];
|
|
creator.Should().NotBeNull();
|
|
|
|
data["https://w3id.org/security#signature"]![0]!["http://purl.org/dc/terms/creator"]![0]!["@value"] += "test";
|
|
var verify = await LdSignature.Verify(data, _keypair.ExportRSAPublicKeyPem());
|
|
verify.Should().BeFalse();
|
|
}
|
|
} |