Source code for pyeudiw.tests.federation.test_static_trust_chain_validator

import copy
import unittest.mock as mock
import uuid
from unittest.mock import Mock

import pyeudiw.federation.trust_chain_validator as tcv
from pyeudiw.tools.exceptions import HttpError
from pyeudiw.federation.trust_chain_validator import StaticTrustChainValidator
from pyeudiw.tests.settings import httpc_params

from .base import (
    EXP,
    JWS,
    NOW,
    intermediate_es_wallet,
    intermediate_es_wallet_signed,
    intermediate_jwk,
    leaf_wallet_jwk,
    leaf_wallet_signed,
    ta_es,
    ta_es_signed,
    ta_jwk,
    trust_chain_wallet,
)

trust_anchor_example = "https://trust-anchor.example.org"
intermediate_example = "https://intermediate.eidas.example.org"



[docs]
def test_is_valid():
    assert StaticTrustChainValidator(trust_chain_wallet, [ta_jwk.serialize()], httpc_params=httpc_params).is_valid



invalid_intermediate = copy.deepcopy(intermediate_es_wallet)
invalid_leaf_jwk = copy.deepcopy(leaf_wallet_jwk.serialize())
invalid_leaf_jwk["kid"] = str(uuid.uuid4())

invalid_intermediate["jwks"]["keys"] = [invalid_leaf_jwk]

intermediate_signer = JWS(invalid_intermediate, alg="ES256", typ="application/entity-statement+jwt")
invalid_intermediate_es_wallet_signed = intermediate_signer.sign_compact([intermediate_jwk])

invalid_trust_chain = [
    leaf_wallet_signed,
    invalid_intermediate_es_wallet_signed,
    ta_es_signed,
]



[docs]
def test_is_valid_equals_false():
    assert not StaticTrustChainValidator(invalid_trust_chain, [ta_jwk.serialize()], httpc_params=httpc_params).is_valid




[docs]
def test_retrieve_ec_fails():
    try:
        StaticTrustChainValidator(invalid_trust_chain, [ta_jwk.serialize()], httpc_params=httpc_params)._retrieve_ec(trust_anchor_example)
    except HttpError:
        return




[docs]
def test_retrieve_ec():
    tcv.get_entity_configurations = Mock(return_value=[leaf_wallet_signed])

    assert (
        tcv.StaticTrustChainValidator(invalid_trust_chain, [ta_jwk.serialize()], httpc_params=httpc_params)._retrieve_ec(trust_anchor_example)
        == leaf_wallet_signed
    )




[docs]
def test_retrieve_es():
    tcv.get_entity_statements = Mock(return_value=[ta_es])

    assert (
        tcv.StaticTrustChainValidator(invalid_trust_chain, [ta_jwk.serialize()], httpc_params=httpc_params)._retrieve_es(
            trust_anchor_example, trust_anchor_example
        )
        == ta_es
    )




[docs]
def test_retrieve_es_output_is_none():
    tcv.get_entity_statements = Mock(return_value=[None])

    assert (
        tcv.StaticTrustChainValidator(invalid_trust_chain, [ta_jwk.serialize()], httpc_params=httpc_params)._retrieve_es(
            trust_anchor_example, trust_anchor_example
        )
        is None
    )




[docs]
def test_update_st_ec_case():
    def mock_method(*args, **kwargs):
        # if args[0] == "https://wallet-provider.example.org":
        return [leaf_wallet_signed]

        # raise Exception("Wrong issuer")

    with mock.patch.object(tcv, "get_entity_configurations", mock_method):
        assert (
            tcv.StaticTrustChainValidator(invalid_trust_chain, [ta_jwk.serialize()], httpc_params=httpc_params)._update_st(leaf_wallet_signed)
            == leaf_wallet_signed
        )




[docs]
def test_update_st_es_case_source_endpoint():
    ta_es = {
        "exp": EXP,
        "iat": NOW,
        "iss": trust_anchor_example,
        "sub": intermediate_example,
        "jwks": {"keys": []},
        "source_endpoint": trust_anchor_example + "/fetch",
    }

    ta_signer = JWS(ta_es, alg="ES256", typ="application/entity-statement+jwt")
    ta_es_signed = ta_signer.sign_compact([ta_jwk])

    def mock_method(*args, **kwargs):
        return [leaf_wallet_signed]

    with mock.patch.object(tcv, "get_entity_statements", mock_method):
        _t = tcv.StaticTrustChainValidator(invalid_trust_chain, [ta_jwk.serialize()], httpc_params=httpc_params)
        assert _t._update_st(ta_es_signed) == leaf_wallet_signed
        assert not _t.is_valid




[docs]
def test_update_st_es_case_no_source_endpoint():
    ta_es = {
        "exp": EXP,
        "iat": NOW,
        "iss": trust_anchor_example,
        "sub": intermediate_example,
        "jwks": {"keys": []},
    }

    ta_signer = JWS(ta_es, alg="ES256", typ="application/entity-statement+jwt")
    ta_es_signed = ta_signer.sign_compact([ta_jwk])

    def mock_method_ec(*args, **kwargs):
        return [intermediate_es_wallet_signed]

    def mock_method_es(*args, **kwargs):
        return [leaf_wallet_signed]

    with mock.patch.object(tcv, "get_entity_statements", mock_method_es):
        with mock.patch.object(tcv, "get_entity_configurations", mock_method_ec):
            _t = tcv.StaticTrustChainValidator(invalid_trust_chain, [ta_jwk.serialize()], httpc_params=httpc_params)
            assert _t._update_st(ta_es_signed) == leaf_wallet_signed