Test environment compliance

Test environment compliance

Author: damikael

src/config_sample/rp.json

@@ -15,6 +15,7 @@
 	},
 	"autoLogin": true,
 
+	"trust_anchor": "https://registry-test.spid.gov.it",
 	"authority_hints": [
 		"https://registry.spid.gov.it"
 	],

src/server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spid-oidc-check-op",
-  "version": "1.15.1",
+  "version": "1.15.2",
   "description": "SPID OIDC Conformance Test Tool for OP",
   "main": "spid-oidc-check-op",
   "author": "Michele D'Amico (damikael) - AgID",

src/test/1.2.14.js

@@ -6,7 +6,7 @@ class Test_1_2_14 extends TestMetadata {
     super(metadata);
     this.num = '1.2.14';
     this.description =
-      "The authority_hints MUST contain 'https://registry.spid.gov.it'";
+      "The authority_hints MUST contain 'https://registry.spid.gov.it' and 'https://registry-test.spid.gov.it'";
     this.validation = 'automatic';
   }
 
@@ -17,9 +17,17 @@ class Test_1_2_14 extends TestMetadata {
       return false;
     }
 
-    this.notes = jwt_decode(this.metadata.entity_statement).authority_hints;
-    if (!this.notes.includes('https://registry.spid.gov.it'))
-      throw "'https://registry.spid.gov.it' is not present in authority_hints";
+    let authority_hints = jwt_decode(this.metadata.entity_statement).authority_hints;
+    this.notes = authority_hints;
+
+    if(!(authority_hints.includes('https://registry.spid.gov.it') && authority_hints.includes('https://registry-test.spid.gov.it'))) {
+      if(!authority_hints.includes('https://registry.spid.gov.it')) {
+        throw "'https://registry.spid.gov.it' is not present in authority_hints";
+      }
+      if(!authority_hints.includes('https://registry-test.spid.gov.it')) {
+        throw "'https://registry-test.spid.gov.it' is not present in authority_hints";
+      }      
+    }
 
     return true;
   }

src/test/1.2.28.js

@@ -1,12 +1,13 @@
 const TestMetadata = require('../server/lib/test/TestMetadata.js');
 const jwt_decode = require('../server/node_modules/jwt-decode');
 const validator = require('../server/node_modules/validator');
+const config_rp = require('../config/rp.json');
 
 class Test_1_2_28 extends TestMetadata {
   constructor(metadata) {
     super(metadata);
     this.num = '1.2.28';
-    this.description = 'The trust_marks array MUST contain a TM of role OP';
+    this.description = 'The trust_marks array MUST contain a TM of role OP private';
     this.validation = 'automatic';
   }
 
@@ -32,7 +33,7 @@ class Test_1_2_28 extends TestMetadata {
     let valid = false;
 
     for(let tm of entity_statement.trust_marks) {
-      valid = valid || (tm.id=='https://registry.spid.gov.it/openid_provider/');
+      valid = valid || (tm.id==config_rp.trust_anchor + '/openid_provider/private/');
     }
 
     if(!valid) {

src/test/1.2.29.js

@@ -4,6 +4,7 @@ const validator = require("../server/node_modules/validator");
 const axios = require("../server/node_modules/axios").default;
 const jose = require("../server/node_modules/node-jose");
 const fs = require("fs");
+const config_rp = require('../config/rp.json');
 const private_key = fs.readFileSync(
   __dirname + "/../config/spid-oidc-check-op-enc.key",
   "utf8"
@@ -28,7 +29,7 @@ class Test_1_2_29 extends TestMetadata {
     let registry_jwks = null;
 
     // get jwk from registry
-    let registry_entity_statement = (await axios.get('https://registry.spid.gov.it/.well-known/openid-federation')).data;
+    let registry_entity_statement = (await axios.get(config_rp.trust_anchor + '/.well-known/openid-federation')).data;
     let registry_config = jwt_decode(registry_entity_statement);
 
     registry_jwks = registry_config.jwks;
@@ -45,7 +46,7 @@ class Test_1_2_29 extends TestMetadata {
     let entity_statement = jwt_decode(this.metadata.entity_statement);
 
     for(let tm of entity_statement.trust_marks) {
-      if(tm.id=='https://registry.spid.gov.it/openid_provider/') {
+      if(tm.id==config_rp.trust_anchor + '/openid_provider/private/') {
 
         let result = await jose.JWS.createVerify(keystore).verify(tm.trust_mark)
         this.notes = result;

src/test/1.7.0.js

@@ -1,12 +1,13 @@
 const TestMetadata = require('../server/lib/test/TestMetadata.js');
 const jwt_decode = require('../server/node_modules/jwt-decode');
 const validator = require('../server/node_modules/validator');
+const config_rp = require('../config/rp.json');
 
 class Test_1_7_0 extends TestMetadata {
   constructor(metadata) {
     super(metadata);
     this.num = '1.7.0';
-    this.description = 'The value of claim id inside the TM with role OP MUST be equal to the value of claim id of related TM into EC';
+    this.description = 'The value of claim id inside the TM with role OP private MUST be equal to the value of claim id of related TM into EC';
     this.validation = 'automatic';
   }
 
@@ -32,19 +33,19 @@ class Test_1_7_0 extends TestMetadata {
     let tm_jwt = null;
 
     for(let ec_tm of entity_statement.trust_marks) {
-      if (ec_tm.id=='https://registry.spid.gov.it/openid_provider/') tm_jwt = ec_tm.trust_mark;
+      if (ec_tm.id==config_rp.trust_anchor + '/openid_provider/private/') tm_jwt = ec_tm.trust_mark;
     }
 
     if(tm_jwt==null) {
       this.notes = entity_statement.trust_marks;
-      throw 'The trust_marks array does not contain any TM of role OP';
+      throw 'The trust_marks array does not contain any TM of role OP private';
     }
 
     let tm = jwt_decode(tm_jwt);
 
-    if(tm.id!='https://registry.spid.gov.it/openid_provider/') {
+    if(tm.id!=config_rp.trust_anchor + '/openid_provider/private/') {
       this.notes = tm.id;
-      throw 'The value of claim id inside TM of role OP is not equal to https://registry.spid.gov.it/openid_provider/';
+      throw 'The value of claim id inside TM of role OP private is not equal to ' + config_rp.trust_anchor + '/openid_provider/private/';
     }
 
     this.notes = tm;

src/test/1.7.1.js

@@ -1,12 +1,13 @@
 const TestMetadata = require('../server/lib/test/TestMetadata.js');
 const jwt_decode = require('../server/node_modules/jwt-decode');
 const validator = require('../server/node_modules/validator');
+const config_rp = require('../config/rp.json');
 
 class Test_1_7_1 extends TestMetadata {
   constructor(metadata) {
     super(metadata);
     this.num = '1.7.1';
-    this.description = 'The value of claim sub inside the TM with role OP MUST be equal to the value of claim sub into EC';
+    this.description = 'The value of claim sub inside the TM with role OP private MUST be equal to the value of claim sub into EC';
     this.validation = 'automatic';
   }
 
@@ -32,7 +33,7 @@ class Test_1_7_1 extends TestMetadata {
     let tm_jwt = null;
 
     for(let ec_tm of entity_statement.trust_marks) {
-      if (ec_tm.id=='https://registry.spid.gov.it/openid_provider/') tm_jwt = ec_tm.trust_mark;
+      if (ec_tm.id==config_rp.trust_anchor + '/openid_provider/private/') tm_jwt = ec_tm.trust_mark;
     }
 
     if(tm_jwt==null) {

src/test/1.7.2.js

@@ -1,12 +1,13 @@
 const TestMetadata = require('../server/lib/test/TestMetadata.js');
 const jwt_decode = require('../server/node_modules/jwt-decode');
 const validator = require('../server/node_modules/validator');
+const config_rp = require('../config/rp.json');
 
 class Test_1_7_2 extends TestMetadata {
   constructor(metadata) {
     super(metadata);
     this.num = '1.7.2';
-    this.description = 'The value of iss inside the TM with role OP MUST be equal to https://registry.spid.gov.it';
+    this.description = 'The value of iss inside the TM with role OP private MUST be equal to ' + config_rp.trust_anchor;
     this.validation = 'automatic';
   }
 
@@ -32,7 +33,7 @@ class Test_1_7_2 extends TestMetadata {
     let tm_jwt = null;
 
     for(let ec_tm of entity_statement.trust_marks) {
-      if (ec_tm.id=='https://registry.spid.gov.it/openid_provider/') tm_jwt = ec_tm.trust_mark;
+      if (ec_tm.id==config_rp.trust_anchor + '/openid_provider/private/') tm_jwt = ec_tm.trust_mark;
     }
 
     if(tm_jwt==null) {
@@ -42,9 +43,9 @@ class Test_1_7_2 extends TestMetadata {
 
     let tm = jwt_decode(tm_jwt);
 
-    if(tm.iss!='https://registry.spid.gov.it') {
+    if(tm.iss!=config_rp.trust_anchor) {
       this.notes = tm.iss;
-      throw 'The value of claim iss inside TM of role OP is not equal to https://registry.spid.gov.it';
+      throw 'The value of claim iss inside TM of role OP is not equal to ' + config_rp.trust_anchor;
     }
 
     this.notes = tm;