Still working on getting client credential flow complete, most of the request works but still working on generating the JWT.

IdentityShroud.Api.Tests/Apis/RealmApisTests.cs

@@ -1,14 +1,13 @@
+using System.Buffers.Text;
 using System.Net;
 using System.Net.Http.Json;
 using System.Security.Cryptography;
 using System.Text.Json.Nodes;
-using IdentityShroud.Core;
-using IdentityShroud.Core.Contracts;
+using IdentityShroud.Core.EFCore;
 using IdentityShroud.Core.Model;
 using IdentityShroud.Core.Tests.Fixtures;
 using IdentityShroud.TestUtils.Asserts;
 using Microsoft.AspNetCore.Mvc;
-using Microsoft.AspNetCore.WebUtilities;
 using Microsoft.EntityFrameworkCore;
 using Microsoft.Extensions.DependencyInjection;
 
@@ -124,28 +123,16 @@ public class RealmApisTests : IClassFixture<ApplicationFactory>
     [Fact]
     public async Task GetJwks()
     {
-        // setup
-        IDekEncryptionService dekEncryptionService = _factory.Services.GetRequiredService<IDekEncryptionService>();
-
-        using var rsa = RSA.Create(2048);
-        RSAParameters parameters = rsa.ExportParameters(includePrivateParameters: false);
-
-        RealmKey realmKey = new()
-        {
-            Id = Guid.NewGuid(),
-            KeyType = "RSA",
-            Key = dekEncryptionService.Encrypt(rsa.ExportPkcs8PrivateKey()),
-            CreatedAt = DateTime.UtcNow,
-        };
-
-        await ScopedContextAsync(async db =>
-        {
-            db.Realms.Add(new Realm() { Slug = "foo", Name = "Foo", Keys = [ realmKey ]});
-            await db.SaveChangesAsync(TestContext.Current.CancellationToken);
-        });
-    
-        // act
         var client = _factory.CreateClient();
+        var createResponse = await client.PostAsync("/api/v1/realms", JsonContent.Create(new
+            {
+                Slug = "foo",
+                Name = "Test'",
+            }),
+            TestContext.Current.CancellationToken);
+        Assert.Equal(HttpStatusCode.Created, createResponse.StatusCode);
+        
+        // act
         var response = await client.GetAsync("/auth/realms/foo/openid-connect/jwks",
             TestContext.Current.CancellationToken);
         
@@ -153,9 +140,16 @@ public class RealmApisTests : IClassFixture<ApplicationFactory>
         JsonObject? payload = await response.Content.ReadFromJsonAsync<JsonObject>(TestContext.Current.CancellationToken);
 
         Assert.NotNull(payload);
-        JsonObjectAssert.Equal(realmKey.Id.ToString(), payload, "keys[0].kid"); 
-        JsonObjectAssert.Equal(WebEncoders.Base64UrlEncode(parameters.Modulus!), payload, "keys[0].n"); 
-        JsonObjectAssert.Equal(WebEncoders.Base64UrlEncode(parameters.Exponent!), payload, "keys[0].e"); 
+        string? kid = JsonObjectAssert.NavigateToPath(payload, "keys[0].kid")?.AsValue().ToString();
+        Assert.NotNull(kid);
+        Assert.True(kid.Length >= 16);
+
+        //if (JsonObjectAssert.NavigateToPath(payload, "keys[0].kty")?.AsValue().ToString() == "RSA")
+
+        JsonObjectAssert.Equal("RSA", payload, "keys[0].kty");
+        string? n = payload["keys"]?[0]?["n"]?.AsValue().ToString();
+        string? e = payload["keys"]?[0]?["e"]?.AsValue().ToString();
+        AssertRsaParams(n, e);
     }
     
     private async Task ScopedContextAsync(
@@ -166,4 +160,22 @@ public class RealmApisTests : IClassFixture<ApplicationFactory>
         var db = scope.ServiceProvider.GetRequiredService<Db>();
         await action(db);
     }
+
+    private static void AssertRsaParams(string? n, string? e)
+    {
+        Assert.NotNull(n);
+        Assert.NotNull(e);
+
+        var rsa = RSA.Create();
+        rsa.ImportParameters(new RSAParameters
+        {
+            Modulus = Base64Url.DecodeFromChars(n),
+            Exponent = Base64Url.DecodeFromChars(e)
+        });
+
+        // If n and e are complete nonsense, this will throw
+        var encrypted = rsa.Encrypt(new byte[] { 1, 2, 3 }, RSAEncryptionPadding.OaepSHA256);
+        Assert.NotNull(encrypted);
+        Assert.NotEmpty(encrypted);    
+    }
 }