Facile\OpenIDClient\ConformanceTest\RpTest\UserInfoEndpoint\RPUserInfoSigEncTest

Complexity

Total Complexity

2

Size/Duplication

Total Lines	48
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	getTestId()	0	3	1
A	execute()	0	41	1

<?php

declare(strict_types=1);

namespace Facile\OpenIDClient\ConformanceTest\RpTest\UserInfoEndpoint;

use Jose\Component\Core\JWK;
use Jose\Component\Core\JWKSet;
use Jose\Component\KeyManagement\JWKFactory;
use PHPUnit\Framework\Assert;
use Facile\OpenIDClient\ConformanceTest\RpTest\AbstractRpTest;
use Facile\OpenIDClient\ConformanceTest\TestInfo;
use Facile\OpenIDClient\Session\AuthSession;
use Facile\OpenIDClient\Service\AuthorizationService;
use Facile\OpenIDClient\Service\UserInfoService;
use function Facile\OpenIDClient\base64url_encode;
use function json_decode;
use function json_encode;

/**
 * Request signed UserInfo.
 *
 * A UserInfo Response.
 */
class RPUserInfoSigEncTest extends AbstractRpTest
{
    public function getTestId(): string
    {
        return 'rp-userinfo-sig+enc';
    }

    public function execute(TestInfo $testInfo): void
    {
        $jwkSig = JWKFactory::createRSAKey(2048, ['alg' => 'RS256', 'use' => 'sig']);
        $jwkEncAlg = JWKFactory::createRSAKey(2048, ['alg' => 'RSA1_5', 'use' => 'enc']);

        $jwks = new JWKSet([$jwkSig, $jwkEncAlg]);
        $publicJwks = new JWKSet(\array_map(static function (JWK $jwk) {
            return $jwk->toPublic();
        }, $jwks->all()));

        $client = $this->registerClient($testInfo, [
            'userinfo_signed_response_alg' => 'RS256',
            'userinfo_encrypted_response_alg' => 'RSA1_5',
            'jwks' => json_decode(json_encode($publicJwks), true),
        ], $jwks);

        Assert::assertSame('RS256', $client->getMetadata()->get('userinfo_signed_response_alg'));
        Assert::assertSame('RSA1_5', $client->getMetadata()->get('userinfo_encrypted_response_alg'));
        Assert::assertSame('A128CBC-HS256', $client->getMetadata()->get('userinfo_encrypted_response_enc'));

        // Get authorization redirect uri
        $authorizationService = new AuthorizationService();

The call to Facile\OpenIDClient\Service\AuthorizationService::__construct() has too few arguments starting with tokenSetFactory.

        $userInfoService = new UserInfoService();

The call to Facile\OpenIDClient\Service\UserInfoService::__construct() has too few arguments starting with userInfoVerifierBuilder.

        $authSession = AuthSession::fromArray([
            'nonce' => base64url_encode(\random_bytes(32)),
        ]);
        $uri = $authorizationService->getAuthorizationUri($client, [
            'response_type' => $testInfo->getResponseType(),
            'nonce' => $authSession->getNonce(),
        ]);

        // Simulate a redirect and create the server request
        $serverRequest = $this->simulateAuthRedirect($uri);

        $params = $authorizationService->getCallbackParams($serverRequest, $client);
        $tokenSet = $authorizationService->callback($client, $params, null, $authSession);

        $userInfo = $userInfoService->getUserInfo($client, $tokenSet);

        Assert::assertArrayHasKey('sub', $userInfo);
    }
}