Andal.LND/edx-platform
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fixup! feat: add JWT KID

Browse Source
This commit is contained in:
Ben Lu
2024-04-03 13:22:51 -05:00
parent ef59da6775
commit 6112f85c0b
1 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
openedx/core/djangoapps/oauth_dispatch/tests/test_jwt.py
View File

@@ -3,7 +3,6 @@ from datetime import timedelta
from unittest.mock import patch
import ddt
import jwt
from django.test import TestCase
from django.test.utils import override_settings
from django.utils.timezone import now
@@ -82,27 +81,27 @@ class TestCreateJWTs(AccessTokenMixin, TestCase):
def test_kid_not_in_jwt_header_with_symmetric_key_and_kid_disabled(self):
jwt_token = self._create_jwt_for_token(DOTAdapter(), use_asymmetric_key=False)
header = jwt.get_unverified_header(jwt_token)
header = jwt_api.jwt.get_unverified_header(jwt_token)
assert 'kid' not in header
self._assert_jwt_is_valid(jwt_token, should_be_asymmetric_key=False)
def test_kid_not_in_jwt_header_with_asymmetric_key_and_kid_disabled(self):
jwt_token = self._create_jwt_for_token(DOTAdapter(), use_asymmetric_key=True)
header = jwt.get_unverified_header(jwt_token)
header = jwt_api.jwt.get_unverified_header(jwt_token)
assert 'kid' not in header
self._assert_jwt_is_valid(jwt_token, should_be_asymmetric_key=True)
@override_settings(JWT_AUTH_ADD_KID_HEADER=True)
def test_kid_not_in_jwt_header_with_symmetric_key_and_kid_enabled(self):
jwt_token = self._create_jwt_for_token(DOTAdapter(), use_asymmetric_key=False)
header = jwt.get_unverified_header(jwt_token)
header = jwt_api.jwt.get_unverified_header(jwt_token)
assert 'kid' not in header
self._assert_jwt_is_valid(jwt_token, should_be_asymmetric_key=False)
@override_settings(JWT_AUTH_ADD_KID_HEADER=True)
def test_kid_in_jwt_header_with_asymmetric_key_and_kid_enabled(self):
jwt_token = self._create_jwt_for_token(DOTAdapter(), use_asymmetric_key=True)
header = jwt.get_unverified_header(jwt_token)
header = jwt_api.jwt.get_unverified_header(jwt_token)
assert 'kid' in header
assert header['kid'] == 'BTZ9HA6K'
self._assert_jwt_is_valid(jwt_token, should_be_asymmetric_key=True)