-
Notifications
You must be signed in to change notification settings - Fork 219
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add verification of issuer signing key with integration test (#2356)
* Fix and test for the signing key issuer validator * Enable mock metadata in samples (new SimulateOidc web API under IntegrationTests) * Updating the UI test to use ExternalApp.Start
- Loading branch information
Showing
23 changed files
with
693 additions
and
70 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
38 changes: 19 additions & 19 deletions
38
tests/DevApps/WebAppCallsWebApiCallsGraph/Client/appsettings.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
42 changes: 42 additions & 0 deletions
42
tests/IntegrationTests/SimulateOidc/Contollers/MetadataController.cs
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,42 @@ | ||
| // Copyright (c) Microsoft Corporation. All rights reserved. | ||
| // Licensed under the MIT License. | ||
|
|
||
| using Microsoft.AspNetCore.Authorization; | ||
| using Microsoft.AspNetCore.Mvc; | ||
|
|
||
| namespace SimulateOidc.Controllers | ||
| { | ||
| // We are using a controller rather than static pages here to serve the OIDC metadata | ||
| // so that we can dynamically replace the jwks_uri with the correct URL for this service. | ||
| [Route("v2.0/.well-known")] | ||
| [ApiController] | ||
| [AllowAnonymous] | ||
| public class MetadataController : ControllerBase | ||
| { | ||
| [HttpGet("/v2.0/.well-known/openid-configuration")] | ||
| public IActionResult OpenIdConnectConfiguration() | ||
| { | ||
| // Get the openIdConnectConfiguration from the embedded resource | ||
| string openIdConnectDocumentString = System.Text.Encoding.UTF8.GetString(Properties.Resource.openid_configuration); | ||
|
|
||
| // Replace the jwks URI based on the base URL of this service. | ||
| string hostUrl = $"{HttpContext.Request.Scheme}://{HttpContext.Request.Host}/"; | ||
| string openIdConnectDocumentJsonString = openIdConnectDocumentString.Replace("https://localhost/", hostUrl, System.StringComparison.InvariantCulture); | ||
|
|
||
| // The openIdConnectConfiguration is served as a JSON string | ||
| return new ContentResult | ||
| { | ||
| ContentType = "application/json", | ||
| Content = openIdConnectDocumentJsonString, | ||
| StatusCode = 200 | ||
| }; | ||
| } | ||
|
|
||
| [HttpGet("/v2.0/.well-known/keys.json")] | ||
| public IActionResult Keys() | ||
| { | ||
| byte[] keysDocument = Properties.Resource.keys; | ||
| return new FileContentResult(keysDocument, "application/json"); | ||
| } | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,32 @@ | ||
| // Copyright (c) Microsoft Corporation. All rights reserved. | ||
| // Licensed under the MIT License. | ||
|
|
||
| namespace SimulateOidc | ||
| { | ||
| public class Program | ||
| { | ||
| public static void Main(string[] args) | ||
| { | ||
| var builder = WebApplication.CreateBuilder(args); | ||
| builder.Services.AddControllers(); | ||
|
|
||
| var app = builder.Build(); | ||
|
|
||
| // Configure the HTTP request pipeline. | ||
| if (!app.Environment.IsDevelopment()) | ||
| { | ||
| app.UseExceptionHandler("/Error"); | ||
| // The default HSTS value is 30 days. You may want to change this for production scenarios, see https://aka.ms/aspnetcore-hsts. | ||
| app.UseHsts(); | ||
| } | ||
|
|
||
| app.UseRouting(); | ||
| app.UseEndpoints(endpoints => | ||
| { | ||
| endpoints.MapControllers(); | ||
| }); | ||
|
|
||
| app.Run(); | ||
| } | ||
| } | ||
| } |
83 changes: 83 additions & 0 deletions
83
tests/IntegrationTests/SimulateOidc/Properties/Resource.Designer.cs
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
Oops, something went wrong.
Oops, something went wrong.