Kévin Chalet
9 years ago
55 changed files with 1988 additions and 1810 deletions
@ -0,0 +1,26 @@ |
|||||
|
<Project Sdk="Microsoft.NET.Sdk"> |
||||
|
|
||||
|
<Import Project="..\..\build\packages.props" /> |
||||
|
|
||||
|
<PropertyGroup> |
||||
|
<TargetFramework>netstandard2.0</TargetFramework> |
||||
|
</PropertyGroup> |
||||
|
|
||||
|
<PropertyGroup> |
||||
|
<Description>OpenID Connect server components for OpenIddict.</Description> |
||||
|
<Authors>Kévin Chalet</Authors> |
||||
|
<PackageTags>aspnetcore;authentication;jwt;openidconnect;openiddict;security</PackageTags> |
||||
|
</PropertyGroup> |
||||
|
|
||||
|
<ItemGroup> |
||||
|
<ProjectReference Include="..\OpenIddict.Core\OpenIddict.Core.csproj" /> |
||||
|
</ItemGroup> |
||||
|
|
||||
|
<ItemGroup> |
||||
|
<PackageReference Include="AspNet.Security.OpenIdConnect.Server" Version="$(AspNetContribOpenIdServerVersion)" /> |
||||
|
<PackageReference Include="JetBrains.Annotations" Version="$(JetBrainsVersion)" PrivateAssets="All" /> |
||||
|
<PackageReference Include="Microsoft.AspNetCore.Diagnostics.Abstractions" Version="$(AspNetCoreVersion)" /> |
||||
|
<PackageReference Include="Newtonsoft.Json.Bson" Version="$(JsonNetBsonVersion)" /> |
||||
|
</ItemGroup> |
||||
|
|
||||
|
</Project> |
||||
File diff suppressed because it is too large
@ -0,0 +1,24 @@ |
|||||
|
<Project Sdk="Microsoft.NET.Sdk"> |
||||
|
|
||||
|
<Import Project="..\..\build\packages.props" /> |
||||
|
|
||||
|
<PropertyGroup> |
||||
|
<TargetFramework>netstandard2.0</TargetFramework> |
||||
|
</PropertyGroup> |
||||
|
|
||||
|
<PropertyGroup> |
||||
|
<Description>Default base stores for OpenIddict.</Description> |
||||
|
<Authors>Kévin Chalet</Authors> |
||||
|
<PackageTags>aspnetcore;authentication;jwt;openidconnect;openiddict;security</PackageTags> |
||||
|
</PropertyGroup> |
||||
|
|
||||
|
<ItemGroup> |
||||
|
<ProjectReference Include="..\OpenIddict.Core\OpenIddict.Core.csproj" /> |
||||
|
<ProjectReference Include="..\OpenIddict.Models\OpenIddict.Models.csproj" /> |
||||
|
</ItemGroup> |
||||
|
|
||||
|
<ItemGroup> |
||||
|
<PackageReference Include="JetBrains.Annotations" Version="$(JetBrainsVersion)" PrivateAssets="All" /> |
||||
|
</ItemGroup> |
||||
|
|
||||
|
</Project> |
||||
File diff suppressed because it is too large
@ -0,0 +1,46 @@ |
|||||
|
<Project Sdk="Microsoft.NET.Sdk"> |
||||
|
|
||||
|
<Import Project="..\..\build\tests.props" /> |
||||
|
|
||||
|
<PropertyGroup> |
||||
|
<TargetFrameworks>netcoreapp2.0;net461</TargetFrameworks> |
||||
|
<TargetFrameworks Condition=" $([Microsoft.Build.Utilities.ToolLocationHelper]::GetPathToReferenceAssemblies('.NETFramework', '4.7', '').Count) != 0 ">$(TargetFrameworks);net47</TargetFrameworks> |
||||
|
<TargetFrameworks Condition=" '$(OS)' != 'Windows_NT' ">netcoreapp2.0</TargetFrameworks> |
||||
|
</PropertyGroup> |
||||
|
|
||||
|
<ItemGroup> |
||||
|
<EmbeddedResource Include="Certificate.pfx" /> |
||||
|
</ItemGroup> |
||||
|
|
||||
|
<ItemGroup> |
||||
|
<ProjectReference Include="..\..\src\OpenIddict\OpenIddict.csproj" /> |
||||
|
</ItemGroup> |
||||
|
|
||||
|
<ItemGroup> |
||||
|
<PackageReference Include="AspNet.Security.OpenIdConnect.Client" Version="$(AspNetContribOpenIdServerVersion)" /> |
||||
|
<PackageReference Include="Microsoft.AspNetCore.Authentication.Cookies" Version="$(AspNetCoreVersion)" /> |
||||
|
<PackageReference Include="Microsoft.AspNetCore.Authentication.Facebook" Version="$(AspNetCoreVersion)" /> |
||||
|
<PackageReference Include="Microsoft.AspNetCore.Authentication.Google" Version="$(AspNetCoreVersion)" /> |
||||
|
<PackageReference Include="Microsoft.AspNetCore.Diagnostics" Version="$(AspNetCoreVersion)" /> |
||||
|
<PackageReference Include="Microsoft.AspNetCore.TestHost" Version="$(AspNetCoreVersion)" /> |
||||
|
<PackageReference Include="Microsoft.Extensions.Caching.Memory" Version="$(AspNetCoreVersion)" /> |
||||
|
<PackageReference Include="Microsoft.Extensions.Logging.Debug" Version="$(AspNetCoreVersion)" /> |
||||
|
<PackageReference Include="Microsoft.NET.Test.Sdk" Version="$(TestSdkVersion)" /> |
||||
|
<PackageReference Include="Moq" Version="$(MoqVersion)" /> |
||||
|
<PackageReference Include="xunit" Version="$(XunitVersion)" /> |
||||
|
<PackageReference Include="xunit.runner.visualstudio" Version="$(XunitVersion)" /> |
||||
|
</ItemGroup> |
||||
|
|
||||
|
<ItemGroup> |
||||
|
<Service Include="{82a7f48d-3b50-4b1e-b82e-3ada8210c358}" /> |
||||
|
</ItemGroup> |
||||
|
|
||||
|
<PropertyGroup Condition=" '$(TargetFramework)' == 'net47' Or '$(TargetFramework)' == 'netcoreapp2.0' "> |
||||
|
<DefineConstants>$(DefineConstants);SUPPORTS_ECDSA</DefineConstants> |
||||
|
</PropertyGroup> |
||||
|
|
||||
|
<PropertyGroup Condition=" '$(TargetFramework)' == 'netcoreapp2.0' "> |
||||
|
<DefineConstants>$(DefineConstants);SUPPORTS_CERTIFICATE_GENERATION</DefineConstants> |
||||
|
</PropertyGroup> |
||||
|
|
||||
|
</Project> |
||||
@ -0,0 +1,721 @@ |
|||||
|
/* |
||||
|
* Licensed under the Apache License, Version 2.0 (http://www.apache.org/licenses/LICENSE-2.0)
|
||||
|
* See https://github.com/openiddict/openiddict-core for more information concerning
|
||||
|
* the license and the contributors participating to this project. |
||||
|
*/ |
||||
|
|
||||
|
using System; |
||||
|
using System.IdentityModel.Tokens.Jwt; |
||||
|
using System.Reflection; |
||||
|
using AspNet.Security.OpenIdConnect.Primitives; |
||||
|
using AspNet.Security.OpenIdConnect.Server; |
||||
|
using Microsoft.AspNetCore.Builder; |
||||
|
using Microsoft.AspNetCore.DataProtection; |
||||
|
using Microsoft.AspNetCore.Hosting; |
||||
|
using Microsoft.AspNetCore.Hosting.Internal; |
||||
|
using Microsoft.AspNetCore.Http; |
||||
|
using Microsoft.Extensions.DependencyInjection; |
||||
|
using Microsoft.Extensions.DependencyInjection.Extensions; |
||||
|
using Microsoft.Extensions.Logging; |
||||
|
using Microsoft.Extensions.Options; |
||||
|
using Microsoft.IdentityModel.Tokens; |
||||
|
using Moq; |
||||
|
using OpenIddict.Models; |
||||
|
using Xunit; |
||||
|
|
||||
|
namespace OpenIddict.Tests |
||||
|
{ |
||||
|
public class OpenIddictExtensionsTests |
||||
|
{ |
||||
|
[Fact] |
||||
|
public void Configure_OptionsAreCorrectlyAmended() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.Configure(configuration => configuration.AccessTokenLifetime = TimeSpan.FromDays(1)); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Equal(TimeSpan.FromDays(1), options.AccessTokenLifetime); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void AddDevelopmentSigningCertificate_ThrowsAnExceptionForNullBuilder() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var builder = (OpenIddictBuilder) null; |
||||
|
|
||||
|
// Act and assert
|
||||
|
var exception = Assert.Throws<ArgumentNullException>(delegate |
||||
|
{ |
||||
|
builder.AddDevelopmentSigningCertificate(); |
||||
|
}); |
||||
|
|
||||
|
Assert.Equal("builder", exception.ParamName); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void AddDevelopmentSigningCertificate_ThrowsAnExceptionForNullSubject() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act and assert
|
||||
|
var exception = Assert.Throws<ArgumentNullException>(delegate |
||||
|
{ |
||||
|
builder.AddDevelopmentSigningCertificate(subject: null); |
||||
|
}); |
||||
|
|
||||
|
Assert.Equal("subject", exception.ParamName); |
||||
|
} |
||||
|
|
||||
|
#if SUPPORTS_CERTIFICATE_GENERATION
|
||||
|
[Fact] |
||||
|
public void AddDevelopmentSigningCertificate_CanGenerateCertificate() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.AddDevelopmentSigningCertificate(); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Equal(1, options.SigningCredentials.Count); |
||||
|
Assert.Equal(SecurityAlgorithms.RsaSha256, options.SigningCredentials[0].Algorithm); |
||||
|
Assert.NotNull(options.SigningCredentials[0].Kid); |
||||
|
} |
||||
|
#else
|
||||
|
[Fact] |
||||
|
public void AddDevelopmentSigningCertificate_ThrowsAnExceptionOnUnsupportedPlatforms() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
builder.AddDevelopmentSigningCertificate(); |
||||
|
|
||||
|
// Act and assert
|
||||
|
var exception = Assert.Throws<PlatformNotSupportedException>(delegate |
||||
|
{ |
||||
|
return GetOptions(services); |
||||
|
}); |
||||
|
|
||||
|
Assert.Equal("X.509 certificate generation is not supported on this platform.", exception.Message); |
||||
|
} |
||||
|
#endif
|
||||
|
|
||||
|
[Fact] |
||||
|
public void AddEphemeralSigningKey_SigningKeyIsCorrectlyAdded() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.AddEphemeralSigningKey(); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Equal(1, options.SigningCredentials.Count); |
||||
|
} |
||||
|
|
||||
|
[Theory] |
||||
|
[InlineData(SecurityAlgorithms.RsaSha256)] |
||||
|
[InlineData(SecurityAlgorithms.RsaSha384)] |
||||
|
[InlineData(SecurityAlgorithms.RsaSha512)] |
||||
|
#if SUPPORTS_ECDSA
|
||||
|
[InlineData(SecurityAlgorithms.EcdsaSha256)] |
||||
|
[InlineData(SecurityAlgorithms.EcdsaSha384)] |
||||
|
[InlineData(SecurityAlgorithms.EcdsaSha512)] |
||||
|
#endif
|
||||
|
public void AddEphemeralSigningKey_SigningCredentialsUseSpecifiedAlgorithm(string algorithm) |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.AddEphemeralSigningKey(algorithm); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
var credentials = options.SigningCredentials[0]; |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Equal(algorithm, credentials.Algorithm); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void AddEncryptingKey_EncryptingKeyIsCorrectlyAdded() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
var factory = Mock.Of<CryptoProviderFactory>(mock => |
||||
|
mock.IsSupportedAlgorithm(SecurityAlgorithms.Aes256KW, It.IsAny<SecurityKey>())); |
||||
|
|
||||
|
var key = Mock.Of<SecurityKey>(mock => mock.CryptoProviderFactory == factory); |
||||
|
|
||||
|
// Act
|
||||
|
builder.AddEncryptingKey(key); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Same(key, options.EncryptingCredentials[0].Key); |
||||
|
} |
||||
|
|
||||
|
[Theory] |
||||
|
[InlineData(SecurityAlgorithms.HmacSha256)] |
||||
|
[InlineData(SecurityAlgorithms.RsaSha256)] |
||||
|
#if SUPPORTS_ECDSA
|
||||
|
[InlineData(SecurityAlgorithms.EcdsaSha256)] |
||||
|
[InlineData(SecurityAlgorithms.EcdsaSha384)] |
||||
|
[InlineData(SecurityAlgorithms.EcdsaSha512)] |
||||
|
#endif
|
||||
|
public void AddSigningKey_SigningKeyIsCorrectlyAdded(string algorithm) |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
var factory = Mock.Of<CryptoProviderFactory>(mock => |
||||
|
mock.IsSupportedAlgorithm(algorithm, It.IsAny<SecurityKey>())); |
||||
|
|
||||
|
var key = Mock.Of<SecurityKey>(mock => mock.CryptoProviderFactory == factory); |
||||
|
|
||||
|
// Act
|
||||
|
builder.AddSigningKey(key); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Same(key, options.SigningCredentials[0].Key); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void AddSigningCertificate_SigningKeyIsCorrectlyAdded() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.AddSigningCertificate( |
||||
|
assembly: typeof(OpenIddictExtensionsTests).GetTypeInfo().Assembly, |
||||
|
resource: "OpenIddict.Server.Tests.Certificate.pfx", |
||||
|
password: "OpenIddict"); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.IsType<X509SecurityKey>(options.SigningCredentials[0].Key); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void AllowAuthorizationCodeFlow_CodeFlowIsAddedToGrantTypes() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.AllowAuthorizationCodeFlow(); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Contains(OpenIdConnectConstants.GrantTypes.AuthorizationCode, options.GrantTypes); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void AllowClientCredentialsFlow_ClientCredentialsFlowIsAddedToGrantTypes() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.AllowClientCredentialsFlow(); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Contains(OpenIdConnectConstants.GrantTypes.ClientCredentials, options.GrantTypes); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void AllowCustomFlow_CustomFlowIsAddedToGrantTypes() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.AllowCustomFlow("urn:ietf:params:oauth:grant-type:custom_grant"); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Contains("urn:ietf:params:oauth:grant-type:custom_grant", options.GrantTypes); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void AllowImplicitFlow_ImplicitFlowIsAddedToGrantTypes() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.AllowImplicitFlow(); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Contains(OpenIdConnectConstants.GrantTypes.Implicit, options.GrantTypes); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void AllowPasswordFlow_PasswordFlowIsAddedToGrantTypes() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.AllowPasswordFlow(); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Contains(OpenIdConnectConstants.GrantTypes.Password, options.GrantTypes); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void AllowRefreshTokenFlow_RefreshTokenFlowIsAddedToGrantTypes() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.AllowRefreshTokenFlow(); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Contains(OpenIdConnectConstants.GrantTypes.RefreshToken, options.GrantTypes); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void DisableConfigurationEndpoint_ConfigurationEndpointIsDisabled() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.DisableConfigurationEndpoint(); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Equal(PathString.Empty, options.ConfigurationEndpointPath); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void DisableCryptographyEndpoint_CryptographyEndpointIsDisabled() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.DisableCryptographyEndpoint(); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Equal(PathString.Empty, options.CryptographyEndpointPath); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void DisableSlidingExpiration_SlidingExpirationIsDisabled() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.DisableSlidingExpiration(); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.False(options.UseSlidingExpiration); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void DisableTokenRevocation_TokenRevocationIsDisabled() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.DisableTokenRevocation(); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.True(options.DisableTokenRevocation); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void EnableAuthorizationEndpoint_AuthorizationEndpointIsEnabled() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.EnableAuthorizationEndpoint("/endpoint-path"); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Equal("/endpoint-path", options.AuthorizationEndpointPath); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void EnableIntrospectionEndpoint_IntrospectionEndpointIsEnabled() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.EnableIntrospectionEndpoint("/endpoint-path"); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Equal("/endpoint-path", options.IntrospectionEndpointPath); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void EnableLogoutEndpoint_LogoutEndpointIsEnabled() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.EnableLogoutEndpoint("/endpoint-path"); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Equal("/endpoint-path", options.LogoutEndpointPath); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void EnableRequestCaching_RequestCachingIsEnabled() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.EnableRequestCaching(); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.True(options.EnableRequestCaching); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void EnableRevocationEndpoint_RevocationEndpointIsEnabled() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.EnableRevocationEndpoint("/endpoint-path"); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Equal("/endpoint-path", options.RevocationEndpointPath); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void EnableScopeValidation_ScopeValidationIsDisabled() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.EnableScopeValidation(); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.True(options.EnableScopeValidation); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void EnableTokenEndpoint_TokenEndpointIsEnabled() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.EnableTokenEndpoint("/endpoint-path"); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Equal("/endpoint-path", options.TokenEndpointPath); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void EnableUserinfoEndpoint_UserinfoEndpointIsEnabled() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.EnableUserinfoEndpoint("/endpoint-path"); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Equal("/endpoint-path", options.UserinfoEndpointPath); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void RequireClientIdentification_ClientIdentificationIsEnforced() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.RequireClientIdentification(); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.True(options.RequireClientIdentification); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void SetAccessTokenLifetime_DefaultAccessTokenLifetimeIsReplaced() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.SetAccessTokenLifetime(TimeSpan.FromMinutes(42)); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Equal(TimeSpan.FromMinutes(42), options.AccessTokenLifetime); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void SetAuthorizationCodeLifetime_DefaultAuthorizationCodeLifetimeIsReplaced() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.SetAuthorizationCodeLifetime(TimeSpan.FromMinutes(42)); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Equal(TimeSpan.FromMinutes(42), options.AuthorizationCodeLifetime); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void SetIdentityTokenLifetime_DefaultIdentityTokenLifetimeIsReplaced() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.SetIdentityTokenLifetime(TimeSpan.FromMinutes(42)); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Equal(TimeSpan.FromMinutes(42), options.IdentityTokenLifetime); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void SetRefreshTokenLifetime_DefaultRefreshTokenLifetimeIsReplaced() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.SetRefreshTokenLifetime(TimeSpan.FromMinutes(42)); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Equal(TimeSpan.FromMinutes(42), options.RefreshTokenLifetime); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void SetIssuer_AddressIsReplaced() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.SetIssuer(new Uri("http://www.fabrikam.com/")); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Equal(new Uri("http://www.fabrikam.com/"), options.Issuer); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void RegisterClaims_ClaimsAreAdded() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.RegisterClaims("custom_claim_1", "custom_claim_2"); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Contains("custom_claim_1", options.Claims); |
||||
|
Assert.Contains("custom_claim_2", options.Claims); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void RegisterScopes_ScopesAreAdded() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.RegisterScopes("custom_scope_1", "custom_scope_2"); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.Contains("custom_scope_1", options.Scopes); |
||||
|
Assert.Contains("custom_scope_2", options.Scopes); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void UseDataProtectionProvider_DefaultProviderIsReplaced() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.UseDataProtectionProvider(new EphemeralDataProtectionProvider(new LoggerFactory())); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.IsType<EphemeralDataProtectionProvider>(options.DataProtectionProvider); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void UseJsonWebTokens_AccessTokenHandlerIsCorrectlySet() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.UseJsonWebTokens(); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.IsType<JwtSecurityTokenHandler>(options.AccessTokenHandler); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public void UseReferenceTokens_ReferenceTokensAreEnabled() |
||||
|
{ |
||||
|
// Arrange
|
||||
|
var services = CreateServices(); |
||||
|
var builder = CreateBuilder(services); |
||||
|
|
||||
|
// Act
|
||||
|
builder.UseReferenceTokens(); |
||||
|
|
||||
|
var options = GetOptions(services); |
||||
|
|
||||
|
// Assert
|
||||
|
Assert.True(options.UseReferenceTokens); |
||||
|
} |
||||
|
|
||||
|
private static OpenIddictBuilder CreateBuilder(IServiceCollection services) |
||||
|
=> new OpenIddictBuilder(services) |
||||
|
{ |
||||
|
ApplicationType = typeof(OpenIddictApplication), |
||||
|
AuthorizationType = typeof(OpenIddictAuthorization), |
||||
|
ScopeType = typeof(OpenIddictScope), |
||||
|
TokenType = typeof(OpenIddictToken) |
||||
|
}; |
||||
|
|
||||
|
private static IServiceCollection CreateServices() |
||||
|
{ |
||||
|
var services = new ServiceCollection(); |
||||
|
services.AddAuthentication(); |
||||
|
services.AddDistributedMemoryCache(); |
||||
|
services.AddLogging(); |
||||
|
services.AddSingleton<IHostingEnvironment, HostingEnvironment>(); |
||||
|
|
||||
|
return services; |
||||
|
} |
||||
|
|
||||
|
private static OpenIddictOptions GetOptions(IServiceCollection services) |
||||
|
{ |
||||
|
services.RemoveAll<IPostConfigureOptions<OpenIdConnectServerOptions>>(); |
||||
|
services.RemoveAll<IPostConfigureOptions<OpenIddictOptions>>(); |
||||
|
|
||||
|
var provider = services.BuildServiceProvider(); |
||||
|
|
||||
|
var options = provider.GetRequiredService<IOptionsSnapshot<OpenIddictOptions>>(); |
||||
|
return options.Get(OpenIdConnectServerDefaults.AuthenticationScheme); |
||||
|
} |
||||
|
} |
||||
|
} |
||||
Loading…
Reference in new issue