Source code for pyeudiw.tests.trust.handler.test_direct_trust

import json
import unittest.mock
import uuid
from dataclasses import dataclass

import requests

from pyeudiw.tests.trust.handler import (
    _generate_empty_json_ok_response,
    _generate_response,
    issuer,
)
from pyeudiw.tests.trust.handler import issuer_jwk as expected_jwk
from pyeudiw.trust.handler._direct_trust_jwk import build_jwk_issuer_endpoint, is_url
from pyeudiw.trust.handler.direct_trust_sd_jwt_vc import (
    DirectTrustSdJwtVc,
    build_metadata_issuer_endpoint,
)
from pyeudiw.trust.exceptions import InvalidJwkMetadataException
from pyeudiw.trust.model.trust_source import TrustSourceData

from requests import Response



def fake_get_http_url(
    urls: list[str] | str, httpc_params: dict, http_async: bool = True
) -> list[requests.Response]:
    issuer = f"https://example-url.issuer.it/vct"

    if urls[0].endswith("vct"):
        response = Response()
        response.status_code = 404
        response.headers.update({"Content-Type": "application/json"})
        return [response]
    
    if urls[0].endswith("vct/.well-known/jwt-vc-issuer"):
        return [_generate_response(issuer, expected_jwk)]

    



def test_direct_trust_build_issuer_jwk_endpoint():
    entity_id = "https://credential-issuer.example/vct"
    well_known_component = "/.well-known/jwt-vc-issuer"
    expected_url = "https://credential-issuer.example/.well-known/jwt-vc-issuer/vct"
    obtained_url = build_jwk_issuer_endpoint(entity_id, well_known_component)
    assert expected_url == obtained_url





def test_direct_trust_build_issuer_metadata_endpoint():
    @dataclass
    class TestCase:
        entity_id: str
        expected: str
        explanation: str

    test_cases: list[TestCase] = [
        TestCase(
            "https://entity-id.example/path",
            "https://entity-id.example/path/.well-known/openid-credential-issuer",
            explanation="the entity id does NOT have a trailing path separator",
        ),
        TestCase(
            "https://entity-id.example/path/",
            "https://entity-id.example/path/.well-known/openid-credential-issuer",
            explanation="the entity id DOES have a trailing path separator",
        ),
    ]

    metadata_endpoint = "/.well-known/openid-credential-issuer"
    for i, case in enumerate(test_cases):
        obtained = build_metadata_issuer_endpoint(case.entity_id, metadata_endpoint)
        assert case.expected == obtained, f"failed case {i}: {case.explanation}"





def test_direct_trust_extract_jwks_from_jwk_metadata_by_value():
    trust_source = DirectTrustSdJwtVc()
    jwk_metadata = {"issuer": issuer, "jwks": {"keys": [expected_jwk]}}
    obt_jwks = trust_source._extract_jwks_from_jwk_metadata(jwk_metadata)
    exp_jwks = {"keys": [expected_jwk]}
    assert obt_jwks == exp_jwks





def test_direct_trust_extract_jwks_from_jwk_metadata_by_reference():
    trust_source = DirectTrustSdJwtVc()
    jwk_metadata = {"issuer": issuer, "jwks_uri": issuer + "jwks"}
    expected_jwks = {"keys": [expected_jwk]}
    jwks_uri_response = requests.Response()
    jwks_uri_response.status_code = 200
    jwks_uri_response.headers.update({"Content-Type": "application/json"})
    jwks_uri_response._content = json.dumps(expected_jwks).encode("utf-8")

    mocked_jwks_document_endpoint = unittest.mock.patch(
        "pyeudiw.trust.handler._direct_trust_jwk.get_http_url",
        return_value=[jwks_uri_response],
    )
    mocked_jwks_document_endpoint.start()
    obtained_jwks = trust_source._extract_jwks_from_jwk_metadata(jwk_metadata)
    mocked_jwks_document_endpoint.stop()

    assert expected_jwks == obtained_jwks





def test_direct_trust_extract_jwks_from_jwk_metadata_invalid():
    trust_source = DirectTrustSdJwtVc()
    jwk_metadata = {"issuer": issuer}
    try:
        trust_source._extract_jwks_from_jwk_metadata(jwk_metadata)
        assert (
            False
        ), "parsed invalid metadata: should have raised InvalidJwkMetadataException instead"
    except InvalidJwkMetadataException:
        assert True





def test_direct_trust_jwk():
    trust_handler = DirectTrustSdJwtVc()

    random_issuer = f"https://{uuid.uuid4()}.issuer.it"

    mocked_issuer_jwt_vc_issuer_endpoint = unittest.mock.patch(
        "pyeudiw.trust.handler._direct_trust_jwk.get_http_url",
        return_value=[_generate_response(random_issuer, expected_jwk)],
    )

    mocked_metadata_endpoint = unittest.mock.patch(
        "pyeudiw.trust.handler.direct_trust_sd_jwt_vc.get_http_url",
        return_value=[_generate_empty_json_ok_response()],
    )

    mocked_metadata_endpoint.start()
    mocked_issuer_jwt_vc_issuer_endpoint.start()

    trust_source = TrustSourceData.empty(random_issuer)
    trust_source = trust_handler.extract_and_update_trust_materials(
        random_issuer, trust_source
    )

    obtained_jwks = trust_source.direct_trust_sd_jwt_vc.get_jwks()

    mocked_issuer_jwt_vc_issuer_endpoint.stop()
    mocked_metadata_endpoint.stop()

    assert len(obtained_jwks) == 1, f"expected 1 jwk, obtained {len(obtained_jwks)}"
    assert expected_jwk == obtained_jwks[0]




def test_direct_trust_jwk_not_conformat_url():
    trust_handler = DirectTrustSdJwtVc()

    issuer = f"https://example-url.issuer.it/vct"

    mocked_issuer_jwt_vc_issuer_endpoint = unittest.mock.patch(
        "pyeudiw.trust.handler._direct_trust_jwk.get_http_url",
        side_effect=fake_get_http_url,
    )

    mocked_issuer_jwt_vc_issuer_endpoint.start()

    trust_source = TrustSourceData.empty(issuer)
    trust_source = trust_handler.extract_and_update_trust_materials(
        issuer, trust_source
    )

    obtained_jwks = trust_source.direct_trust_sd_jwt_vc.get_jwks()

    mocked_issuer_jwt_vc_issuer_endpoint.stop()

    assert len(obtained_jwks) == 1, f"expected 1 jwk, obtained {len(obtained_jwks)}"
    assert expected_jwk == obtained_jwks[0]





def test_is_url():
    assert is_url("missing-scheme.net") == False
    assert is_url("http//malformed-scheme.net") == False
    assert is_url("https://malformed_domain.org") == False
    assert is_url("https://domain.example") == True
    assert is_url("https://domain.example/path") == True
    assert is_url("https://domain.example/path/trailing/") == True