Add support for OAuth2 configuration about fusionauth-jwt HOT 8 CLOSED

Seems reasonable.

from fusionauth-jwt.

Hey @robotdan would you be OK if I refactor JSONWebKeySetTest slightly? It'll be easier to unit test if we're not going out to real endpoints (especially as I can't seem to find many public servers supporting the spec) - would you be happy with that?

(Originally published at: https://www.jvt.me/mf2/2020/10/oxt9d/)

from fusionauth-jwt.

Is this just to add some additional tests you mean? The ones that are there should work since those are legit endpoints.
https://github.com/FusionAuth/fusionauth-jwt/blob/48cd5897019b923ad7fe318aa0d632484a0ccddd/src/test/java/io/fusionauth/jwks/JSONWebKeySetTest.java

Or do you mean in order to add code for retrieveKeysFromIssuer?

from fusionauth-jwt.

Sorry, I wasn't clear. In JSONWebKeySetTest we're reaching out to a real set of endpoints.

However, I can't seem to find a public OAuth2 server that supports RFC8414 to write a test.

I was thinking of using something like Wiremock to create a fake server so I can stub it out, and wondered if you'd be happy with that as a change to the existing tests in JSONWebKeySetTest?

(Originally published at: https://www.jvt.me/mf2/2020/10/wczpu/)

from fusionauth-jwt.

Ah, ok, got it. Yeah, don't have to test real endpoints if there aren't any public ones that we can hit reliably.

You can just build some expected JSON and then parse it similar to how we do JWKS.

https://github.com/FusionAuth/fusionauth-jwt/tree/master/src/test/resources/jwk
https://github.com/FusionAuth/fusionauth-jwt/blob/013a981b7c82173fdd40b26a0384584677aaf7f0/src/test/java/io/fusionauth/jwks/JSONWebKeyBuilderTest.java

I can help write tests as well if you know what code you want to write.

from fusionauth-jwt.

If you have a valid response from that RFC, you could use the internal HTTP server that Java ships with for testing.

from fusionauth-jwt.

@jamietanna I stubbed this out under 314d76f. Let me know if that will work for you.

Feel free to submit some more tests if you have a specific use case you want to test for:

• https://github.com/FusionAuth/fusionauth-jwt/blob/master/src/main/java/io/fusionauth/oauth2/ServerMetaDataHelper.java
• https://github.com/FusionAuth/fusionauth-jwt/blob/master/src/test/java/io/fusionauth/oauth2/ServerMetaDataTest.java
• https://github.com/FusionAuth/fusionauth-jwt/blob/master/src/test/resources/oauth2/example_server_metadata.json

from fusionauth-jwt.

Releasing in 4.1.0, if there are additional features or missing capabilities from what I've described here, please open a new issue to track. Thanks!

from fusionauth-jwt.