smoke.test.mjs

import test from 'ava'
import * as crypto from 'crypto'
import { conditional, root, keyRoot } from '../dist.mjs'

const {
  FlattenedSign,
  flattenedVerify,
  base64url: { encode: base64url },
} = await import(root)
const { importJWK, generateKeyPair, generateSecret } = await import(keyRoot)

function pubjwk(jwk) {
  const { d, p, q, dp, dq, qi, ...publicJwk } = jwk
  return publicJwk
}

test.before(async (t) => {
  const p256 = {
    ext: false,
    crv: 'P-256',
    x: 'Sp3KpzPjwcCF04_W2GvSSf-vGDvp3Iv2kQYqAjnMB-Y',
    y: 'lZmecT2quXe0i9f7b4qHvDAFDpxs0oxCoJx4tOOqsks',
    d: 'hRVo5TGE_d_4tQC1KEQIlCdo9rteZmLSmaMPpFOjeDI',
    kty: 'EC',
  }
  const p384 = {
    ext: false,
    crv: 'P-384',
    x: 'H50cO3PJnVhAoF6_jPKpCl60cnvmoygN2u29jVN19x8C2PymixZS4Y5d1FfMMK3L',
    y: 'ATQ-4QWyYTtEaBW3CFQZEX0NdDE5g_9F24B0y2xxQgVmWa5Uz0QerlhzFoYU7Z_F',
    d: 'HDUcH8y8xr22EroPYBK3PvpNjA3pCJjvHpBXKejxOiQCoXhZ5PhX_nxb7lU0mlDE',
    kty: 'EC',
  }
  const p521 = {
    ext: false,
    crv: 'P-521',
    x: 'AFy8VTdHeJx7rrUajpeqIjGZsjtx0tftQ7pdL1qkTRpnvY0WVVKXjib3HINNLMA72gA7JujbvEtGvkvoo0P7pGVK',
    y: 'AfMRSFv9qfcH_XMHfPoltBMYLhDbS3Pw1GL7NO9SI_vF4JsiAta1Bq6teCl2z8klFtRCWXHfPqEF3cmXS8bDQVoT',
    d: 'AL123tYK7y-iViaReLOHe7XxKNSeoUMk4RRmcP6nSVuZrYJHtyYPak4gUmWB6A_GzED3zXkrkcssZEzHrYQILw5c',
    kty: 'EC',
  }
  const secp256k1 = {
    ext: false,
    crv: 'secp256k1',
    x: 'Hr99bGFN0HWT3ZgNNAXvmz-6Wk1HIxwsyFqUZH8PBFc',
    y: 'bonc3DRZe51NzuWetY336VmTYdUFvPK7DivSPHeu_CA',
    d: 'jv_VrhPomm6_WOzb74xF4eMI0hu9p0W1Zlxi0nz8AFs',
    kty: 'EC',
  }
  const rsa = {
    ext: false,
    e: 'AQAB',
    n: 'rPOe2kdmQY1wN2ADn-EIKsPO_kXotIqPjbZQOoW6sIHPGS8xJqrR60JLTBir5jG8Prrp4_KoEDGm3zYlWb5EJr9BMAVHAUYB2ZMXjdojpIkKeJ_cMI0lLcSUTkKkOA6u2DnVJBlnQgeyVZ927h65cJ5zsnSqG6MHh5tVPAwocEsfH27Tik_Fp-dCidmr_-rCrPfoAuASadvuFr5oAa7aAKdlLz6P0GgmCs2KzTAR6FiBMm48hd1YkrIaGzljKOwCgh0KYA3tnetbOCFEuzsmn9wmQHUA0iPQqYGlFJVfQ64949hQk42uWxCXtaO_wlXqy_TVki5LTQ7hO4reUiMXpQ',
    d: 'qhn97b91khmS-dOkHPYNu0nUZv_JDPCOmhlqtPRcFkfFsYZZuCcfyVvthM1rHD9kXuolKf26UBsVfcnaWHaqvtUyPxGhsV3yadSiwPCAR85FDzhjLxlTLL2AA6zFqSC_1Iik2hlmFmpNeqsZJL_xMROWxTi7Ke1hdX1QCnwGtdF-Emdqgf1wqBWv6VTQVd2qslQySQN8RLTYmlkHBmOHU1jc0e2QP5xbLD4-pPr7RW17WbOkW2aLsC0YYebqFaqVgLNZJIVDKetRCCgi1RcdieQ0zSuUfRc9wzhZW7HHCECASqjeFqHopG05ge-DwAcc62-H7EbKr0XWz-7SLqjTrQ',
    p: '3wSG2cBBbo6FZ0GiRucHhJhSx1U6ZRhwhrbJmSpiFG5rvHvZn-DWnOmurvO5jc1V2Qj4QAEO4w7YQh3A9PFBry_42Od5zof1GIeAOVT3REiMTOSCxMVEMWQ74UBUM2T2R_TDrBgVSuaRmX14mcZM6_SYu7JLpqeSDzZEy2cqOBs',
    q: 'xoeWkL7oZ488PsJ6_lkjCmrlxouKJgHqMHI_RVE-MGSYHDNrJ_iS4wp8CK4xhAdGukqxDm5ChqFECgdg5QfdLoCseAIC-aHrrylYrmka5_8ke-ObpW9iGFcZy-5cEH5NCr6iSb-KS6fZkxJl7g3Az6XmLoEHHmyy8QxG9Yikaz8',
    dp: 'DKUxED-6dg5Wuhgan3KSFo6cgvjuKrVMDBdpLuocTZRFP5a2LD6PbK5DXWAscUHnUDsV-GsW8QDyei09t6XGV6ycq4_UdEV5PD7Som2S56hFbEa4s3eL-lD4pDkFjTR4UnQqdCOZcXnJX66hm_aGfgqMbngZmgV-XqZxGCdtWWk',
    dq: 'uX6ijefyWiCZF8K7DL_YX7l1q8dhcxXC7TUyLOA2DR1Qirj4XEaDaCO5tJqdpVDvIsz7FhKrkgNIAV7Xh-eLIBIWE6M9iGVkQyuMspl-DFp2ilMmcLLbowZvEf5KgxafgXSRSfrvirTwM9yy5HRxPRMzOSxRrHm_0D26Z1we1B0',
    qi: 'htPHLViOVG6QrldfuHn9evfdlD-UEuViOWNx8aKR3IBv0qegpJ78vYB4hdAcJZtBslKI97En5rzOAN3Y6Y8MbI4oN77WeiePJl2cMrS64evmlERvjJ6ZTs8jK0iV5q_gIZ9Qg9drmolUgb_CccQOBFbqSL6YkXwCBxlkCrzTlhc',
    kty: 'RSA',
  }
  const ed25519 = {
    ext: false,
    crv: 'Ed25519',
    x: 'beguov5KuiEE0a9t_NaKRwnqLp0OIURn2BTYmdLMed4',
    d: 'Z1Q1Hgl8PfBvypfTzQOklI5r0y4ImPfWHP4OoIKm_kA',
    kty: 'OKP',
  }
  const ed448 = {
    ext: false,
    crv: 'Ed448',
    x: 'YecSEZalR2McQ2f0yU8mMwLXSzz7eHirRsv0o9lqGhCZMihCPjpLKJ9BHj3u2DTnLtcBXGYmJbYA',
    d: 'epoLrq-y89h6gjCEZl39VGKQKqqHlTgt0gp7mMM1bbZOPkToOOusOvxwayZlVU8pRtLbAIxcTK7n',
    kty: 'OKP',
  }
  t.context.keys = {
    rsa: {
      public: pubjwk(rsa),
      private: rsa,
      algs: ['RS256', 'RS384', 'RS512', 'PS256', 'PS384', 'PS512'],
    },
    ed25519: {
      public: pubjwk(ed25519),
      private: ed25519,
      algs: ['EdDSA'],
      generate: { crv: 'Ed25519' },
    },
    ed448: {
      public: pubjwk(ed448),
      private: ed448,
      algs: ['EdDSA'],
      generate: { crv: 'Ed448' },
    },
    p256: {
      public: pubjwk(p256),
      private: p256,
      algs: ['ES256'],
    },
    secp256k1: {
      public: pubjwk(secp256k1),
      private: secp256k1,
      algs: ['ES256K'],
    },
    p384: {
      public: pubjwk(p384),
      private: p384,
      algs: ['ES384'],
    },
    p521: {
      public: pubjwk(p521),
      private: p521,
      algs: ['ES512'],
    },
    oct256: {
      secret: {
        ext: false,
        kty: 'oct',
        k: base64url(crypto.randomFillSync(new Uint8Array(256 >> 3))),
      },
      algs: ['HS256'],
    },
    oct384: {
      secret: {
        ext: false,
        kty: 'oct',
        k: base64url(crypto.randomFillSync(new Uint8Array(384 >> 3))),
      },
      algs: ['HS256', 'HS384'],
    },
    oct512: {
      secret: {
        ext: false,
        kty: 'oct',
        k: base64url(crypto.randomFillSync(new Uint8Array(512 >> 3))),
      },
      algs: ['HS256', 'HS384', 'HS512'],
    },
  }
})

async function smoke(t, ref, octAsKeyObject = false) {
  const fixtures = t.context.keys[ref]
  await Promise.all([
    ...fixtures.algs.map(async (alg) => {
      let priv
      let pub
      if ('secret' in fixtures) {
        const secret = await importJWK(fixtures.secret, alg, octAsKeyObject)
        if (octAsKeyObject) {
          t.false(secret instanceof Uint8Array)
        } else {
          t.true(secret instanceof Uint8Array)
        }
        pub = secret
        priv = secret
      } else {
        ;[pub, priv] = await Promise.all([
          importJWK(fixtures.public, alg),
          importJWK(fixtures.private, alg),
        ])
      }

      const jws = await new FlattenedSign(crypto.randomFillSync(new Uint8Array(256 >> 3)))
        .setProtectedHeader({ alg })
        .sign(priv)
      await flattenedVerify(jws, pub)
    }),
    ...fixtures.algs.map(async (alg) => {
      let priv
      let pub
      if ('secret' in fixtures) {
        const secret = await generateSecret(alg)
        pub = secret
        priv = secret
      } else {
        ;({ privateKey: priv, publicKey: pub } = await generateKeyPair(alg, fixtures.generate))
      }

      const jws = await new FlattenedSign(crypto.randomFillSync(new Uint8Array(256 >> 3)))
        .setProtectedHeader({ alg })
        .sign(priv)
      await flattenedVerify(jws, pub)
    }),
  ])
  t.pass()
}
smoke.title = (title, ref) => `${ref.toUpperCase()}${title ? ` ${title}` : ''}`

test(smoke, 'rsa')
test(smoke, 'p256')
test(smoke, 'p384')
test(smoke, 'p521')
test(smoke, 'oct256')
test(smoke, 'oct384')
test(smoke, 'oct512')
test(smoke, 'ed25519')
test('as keyobject', smoke, 'oct256', true)
test('as keyobject', smoke, 'oct384', true)
test('as keyobject', smoke, 'oct512', true)

conditional({ webcrypto: 0, electron: 0 })(smoke, 'secp256k1')
conditional({ electron: 0 })(smoke, 'ed448')