[MOL-13183][SW] update tests

Author: shawn wee

src/singpass/__tests__/singpass-helper-ndi.ext.spec.ts

@@ -69,7 +69,7 @@ describe.skip("Singpass NDI OIDC integration", () => {
 		const nonce = Date.now() + "";
 		const state = nonce + "-state";
 		const codeVerifier = pkceFlow ? generators.codeVerifier() : undefined;
-		const authorizationUrl = await spNdiHelper.constructAuthorizationUrl(state, nonce, codeVerifier);
+		const authorizationUrl = await spNdiHelper.constructAuthorizationUrl(state, nonce, [], codeVerifier);
 		logger.debug("authorizationUrl: ", authorizationUrl);
 		codeVerifier && logger.debug("codeVerifier: ", codeVerifier);
 	};

src/singpass/__tests__/singpass-helper-ndi.spec.ts

@@ -10,11 +10,8 @@ const mockDecryptKey = "sshh-secret";
 const mockSignKey = "sshh-secret";
 const mockTokenResponse: TokenResponse = {
 	access_token: "MOCK_ACCESS_TOKEN",
-	refresh_token: "MOCK_REFRESH_TOKEN",
 	id_token: "MOCK_ID_TOKEN",
 	token_type: "bearer",
-	expires_in: 599,
-	scope: "openid",
 };
 
 const createMockTokenPayload = (overrideProps?: Partial<TokenPayload>): TokenPayload => ({
@@ -49,7 +46,7 @@ describe("NDI Singpass Helper", () => {
 					},
 				}),
 			);
-			const authUrl = await helper.constructAuthorizationUrl("af0ifjsldkj", "a2ghskf1234las");
+			const authUrl = await helper.constructAuthorizationUrl("af0ifjsldkj", "a2ghskf1234las", []);
 			const expected =
 				"https://mocksingpass.sg/authorize?state=af0ifjsldkj&nonce=a2ghskf1234las&redirect_uri=http%3A%2F%2Fmockme.sg%2Fcallback&scope=openid&client_id=CLIENT-ID&response_type=code";
 			expect(authUrl).toEqual(expected);
@@ -64,7 +61,7 @@ describe("NDI Singpass Helper", () => {
 					},
 				}),
 			);
-			const authUrl = await helper.constructAuthorizationUrl("af0ifjsldkj", "a2ghskf1234las", "2345667");
+			const authUrl = await helper.constructAuthorizationUrl("af0ifjsldkj", "a2ghskf1234las", [], "2345667");
 			const expected =
 				"https://mocksingpass.sg/authorize?state=af0ifjsldkj&nonce=a2ghskf1234las&redirect_uri=http%3A%2F%2Fmockme.sg%2Fcallback&scope=openid&client_id=CLIENT-ID&response_type=code&code_challenge_method=S256&code_challenge=ry3USnoiRbnteX-97HMq8iiTHOzPnoXSaytUNIuOXUg";
 			expect(authUrl).toEqual(expected);
@@ -172,4 +169,66 @@ describe("NDI Singpass Helper", () => {
 			expect(axiosMock).toHaveBeenCalledTimes(2);
 		});
 	});
+
+	describe("getUserInfo()", () => {
+		const mockOverrideDecryptKey =
+			'{"kty": "EC","d": "AA1YtF2O779tiuJ4Rs3UVItxgX3GFOgQ-aycS-n-lFU","use": "enc","crv": "P-256","kid": "MOCK-OVERRIDE-DECRYPT-KEY-ID","x": "MFqQFZrB74cDhiBHhIBg9iCB-qj86vU45dj2iA-RAjs","y": "yUOsmZh4rd3qwqXRgRCIaAyRcOj4S0mD6tEsd-aTlL0","alg": "ECDH-ES+A256KW"}';
+
+		const mockVerifiedJws = { payload: JSON.stringify({ mockResults: "VERIFIED_JWS" }) };
+
+		it("should use overrideDecryptKey when specified", async () => {
+			const corppassHelper = new NdiOidcHelper({
+				...props,
+			});
+
+			const mockDecryptJwe = jest
+				.spyOn(JweUtils, "decryptJWE")
+				.mockResolvedValueOnce({ payload: "DECRYPT_RESULTS" } as unknown as JWE.DecryptResult);
+			const mockVerifyJWSUsingKeyStore = jest
+				.spyOn(JweUtils, "verifyJwsUsingKeyStore")
+				.mockResolvedValueOnce(mockVerifiedJws as unknown as JWS.VerificationResult);
+
+			const mockJwksUrl = "https://www.mocksingpass.gov.sg/.well-known/keys";
+			const mockTokenEndpoint = "https://www.mocksingpass.gov.sg/mga/sps/oauth/oauth20/token";
+			const mockIssuer = "https://www.mocksingpass.gov.sg";
+			const mockAuthorizationInfoEndpoint = "https://www.mocksingpass.gov.sg/authorization-info";
+			const axiosMock = jest.fn();
+			// First get is to get OIDC Config
+			axiosMock.mockImplementationOnce(() => {
+				return {
+					status: 200,
+					data: {
+						token_endpoint: mockTokenEndpoint,
+						issuer: mockIssuer,
+						"authorization-info_endpoint": mockAuthorizationInfoEndpoint,
+						jwks_uri: mockJwksUrl,
+					},
+				};
+			});
+
+			// Second get is to get JWKS
+			axiosMock.mockImplementationOnce(() => {
+				return {
+					status: 200,
+					data: {
+						keys: ["MOCK_KEY"],
+					},
+				};
+			});
+
+			corppassHelper._testExports.getSingpassClient().get = axiosMock;
+
+			await corppassHelper.getUserInfo(mockTokenResponse.access_token, {
+				key: mockOverrideDecryptKey,
+				format: "json",
+			});
+
+			expect(axiosMock.mock.calls[0]).toEqual(expect.arrayContaining([mockOidcConfigUrl]));
+			expect(axiosMock.mock.calls[1]).toEqual(expect.arrayContaining([mockJwksUrl]));
+
+			expect(mockDecryptJwe).toHaveBeenCalledWith(mockTokenResponse.id_token, mockOverrideDecryptKey, "json");
+			expect(mockVerifyJWSUsingKeyStore).toHaveBeenCalledWith("DECRYPT_RESULTS", ["MOCK_KEY"]);
+			expect(axiosMock).toHaveBeenCalledTimes(2);
+		});
+	});
 });