123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178
// Testing libimport { assert, use } from "chai";import * as chaiAsPromised from "chai-as-promised";
// Helpersimport { Key, tools } from "../lib/main.js";
import * as h from "./helpers/fido2-helpers.js";import { cosePublicKey } from "./fixtures/cosePublicKey.js";
import { rsaPublicKey } from "./fixtures/rsaPublicKey.js";
use(chaiAsPromised.default);
describe("key utils", function() {	describe("Key", function() {		describe("constructor", function() {			let key;			it("can create empty key", function() {				key = new Key();				assert.instanceOf(key, Key);			});
			it("throws if trying to export empty key", () => {				assert.isRejected(key.toPem(), Error, "Key data not available");			});
			it("throws if invalid argument is passed as key", function() {				assert.throws(					() => {						new Key({ foo: "bar" });					},					TypeError,					"Invalid argument passed to Key constructor, should be instance of CryptoKey with type public",				);			});
			it("throws if trying to get non existant key", function() {				assert.throws(					() => {						const k = new Key();						k.getKey();					},					Error,					"Key data not available",				);			});
			describe("rsa spki (base64 part only only)", function() {				const k = new Key();				it("throws", () => {					assert.isRejected(						k.fromPem(cosePublicKey.examplePemBase64Only),						Error,						"Supplied key is not in PEM format",					);				});			});
			describe("rsa spki 2048 bits", function() {				const k = new Key();				it("can import", async () => {					await k.fromPem(rsaPublicKey.pem2048);				});			});
			describe("rsa spki 4096 bits", function() {				const k = new Key();				it("can import", async () => {					await k.fromPem(rsaPublicKey.pem4096, "SHA-384");				});
				it("has key data", () => {					assert.isDefined(k.getKey());				});
				it("correctly identifies algorithm as RSASSA-PKCS1-v1_5 with and uses overriden hash algorithm SHA-384", () => {					const alg = k.getAlgorithm();					assert.equal(alg.name, "RSASSA-PKCS1-v1_5");					assert.equal(alg.hash, "SHA-384");				});			});
			describe("rsa spki", function() {				const k = new Key();				it("can import", async () => {					await k.fromPem(h.lib.assnPublicKey);				});				it("has key data", () => {					assert.isDefined(k.getKey());				});				it("correctly identifies algorithm as EDCDSA P-256", () => {					const alg = k.getAlgorithm();					assert.instanceOf(alg, Object);					assert.equal(alg.name, "ECDSA");					assert.equal(alg.namedCurve, "P-256");				});				it("can re-export to identical PEM (using original pem)", async () => {					const pem = await k.toPem();					assert.equal(pem, h.lib.assnPublicKey);				});				it("throws on exporting to jwk", () => {					assert.throws(						() => {							k.toJwk();						},						Error,						"No usable key information available",					);				});
				it("throws on exporting to cose", () => {					assert.throws(						() => {							k.toCose();						},						Error,						"No usable key information available",					);				});			});
			describe("can import ecdsa spki", function() {				const k = new Key();				it("can import", async () => {					await k.fromPem(h.lib.assnPublicKeyWindowsHello);				});				it("has key data", () => {					assert.isDefined(k.getKey());				});				it("correctly identifies algorithm as RSASSA-PKCS1-v1_5 with and defaults to SHA-256 signature hash algorithm", () => {					const alg = k.getAlgorithm();					assert.equal(alg.name, "RSASSA-PKCS1-v1_5");					assert.equal(alg.hash, "SHA-256");				});				it("can re-export to identical PEM (using original pem)", async () => {					const pem = await k.toPem();					assert.equal(pem, h.lib.assnPublicKeyWindowsHello);				});			});
			describe("can import cose public key", function() {				const k = new Key();				it("can import", async () => {					await k.fromCose(tools.base64.toArrayBuffer(cosePublicKey.exampleBase64));				});				it("has key data", () => {					assert.isDefined(k.getKey());				});				it("correctly identifies algorithm as ECDSA P-256 with SHA-256 hash", () => {					const alg = k.getAlgorithm();					assert.equal(alg.name, "ES256");					assert.equal(alg.hash, "SHA-256");					assert.equal(alg.namedCurve, "P-256");				});				it("can export to jwk", () => {					const jwk = k.toJwk();					assert.equal(jwk.alg, "ECDSA_w_SHA256");					assert.equal(jwk.crv, "P-256");				});				it("can export to PEM", async () => {					const pem = await k.toPem();					assert.equal(pem, cosePublicKey.examplePem);				});			});
			describe("throws on invalid cose data 1", function() {				const k = new Key();				assert.isRejected(					k.fromCose(tools.base64.toArrayBuffer(cosePublicKey.exampleInvalidBase64)),					Error,					"couldn't parse authenticator.authData.attestationData CBOR: Error: No packed values available",				);			});		});	});});