Automate local JWT validation testing

irods / irods_client_http_api

An iRODS C++ HTTP API using Boost.Beast

BSD 3-Clause "New" or "Revised" License

0 stars 8 forks source link

Automate local JWT validation testing #354

Open MartinFlores751 opened 3 weeks ago

MartinFlores751 commented 3 weeks ago

See #344.

Test all supported algorithms. Test expired JWTs. Test missing JWKs (partial and complete if able). Test garbage 'JWT's, anything 'triple dot' (e.g. abc.efg.ghi).

Misc: Test garbage inputs in general.

Additionally, see if there's a way to generate valid tokens and modify only parts of them.

korydraughn commented 3 weeks ago

Conversation starts at https://github.com/irods/irods_client_http_api/pull/344#issuecomment-2457773601.