Split jwt/jwk example service

Author: ldclakmal

test-suite/packages/test.auth.jwt/jwt_secured_service.bal

@@ -11,16 +11,7 @@ listener http:Listener jwtListenerEP = new(9090, config = {
     }
 });
 
-listener http:Listener jwkListenerEP = new(9091, config = {
-    secureSocket: {
-        keyStore: {
-            path: "resources/ballerinaKeystore.p12",
-            password: "ballerina"
-        }
-    }
-});
-
-service /orders on jwtListenerEP, jwkListenerEP {
+service /orders9090 on jwtListenerEP {
 
     @http:ResourceConfig {
 	    auth: [
@@ -39,7 +30,67 @@ service /orders on jwtListenerEP, jwkListenerEP {
                     }
                 },
                 scopes: ["view-order"]
-            },
+            }
+        ]
+	}
+    resource function get view() returns json {
+        json inventory = {
+            "items": [
+                {
+                    "code": uuid:createType4AsString(),
+                    "qty" : checkpanic random:createIntInRange(1, 100)
+                }
+            ]
+        };
+        return inventory;
+    }
+
+    @http:ResourceConfig {
+        auth: [
+            {
+                jwtValidatorConfig: {
+                    issuer: "wso2is",
+                    audience: "3VTwFk7u1i366wzmvpJ_LZlfAV4a",
+                    signatureConfig: {
+                        trustStoreConfig: {
+                            certAlias: "wso2carbon",
+                            trustStore: {
+                                path: "resources/wso2Truststore.p12",
+                                password: "wso2carbon"
+                            }
+                        }
+                    }
+                },
+                scopes: ["add-order"]
+            }
+        ]
+    }
+    resource function get add() returns json {
+        json inventory = {
+            "items": [
+                {
+                    "code": uuid:createType4AsString(),
+                    "qty" : checkpanic random:createIntInRange(1, 100)
+                }
+            ]
+        };
+        return inventory;
+    }
+}
+
+listener http:Listener jwkListenerEP = new(9091, config = {
+    secureSocket: {
+        keyStore: {
+            path: "resources/ballerinaKeystore.p12",
+            password: "ballerina"
+        }
+    }
+});
+
+service /orders9091 on jwkListenerEP {
+
+    @http:ResourceConfig {
+	    auth: [
             {
                 jwtValidatorConfig: {
                     issuer: "wso2is",
@@ -76,22 +127,6 @@ service /orders on jwtListenerEP, jwkListenerEP {
 
     @http:ResourceConfig {
         auth: [
-            {
-                jwtValidatorConfig: {
-                    issuer: "wso2is",
-                    audience: "3VTwFk7u1i366wzmvpJ_LZlfAV4a",
-                    signatureConfig: {
-                        trustStoreConfig: {
-                            certAlias: "wso2carbon",
-                            trustStore: {
-                                path: "resources/wso2Truststore.p12",
-                                password: "wso2carbon"
-                            }
-                        }
-                    }
-                },
-                scopes: ["add-order"]
-            },
             {
                 jwtValidatorConfig: {
                     issuer: "wso2is",
@@ -126,3 +161,4 @@ service /orders on jwtListenerEP, jwkListenerEP {
         return inventory;
     }
 }
+

test-suite/scripts/test_jwt_auth.sh

@@ -23,21 +23,21 @@ for port in 9090 9091
 do
   echo -e "\nTest1: Authn Failure:"
   echo -e "\nInvoking Ballerina JWT service:"
-  response=$(curl -k -i -H "AUTHORIZATION: Bearer InvalidToken" https://localhost:$port/orders/view)
+  response=$(curl -k -i -H "AUTHORIZATION: Bearer InvalidToken" https://localhost:$port/orders$port/view)
   assertNotEmpty $response
   echo -e "\nBallerina service response: $response"
   assertAuthnFailure $response
 
   echo -e "\nTest2: Authn Success - Authz Failure:"
   echo -e "\nInvoking Ballerina JWT service:"
-  response=$(curl -k -i -H "AUTHORIZATION: Bearer $token" https://localhost:$port/orders/add)
+  response=$(curl -k -i -H "AUTHORIZATION: Bearer $token" https://localhost:$port/orders$port/add)
   assertNotEmpty $response
   echo -e "\nBallerina service response: $response"
   assertAuthzFailure $response
 
   echo -e "\nTest3: Authn Success - Authz Success:"
   echo -e "\nInvoking Ballerina JWT service:"
-  response=$(curl -k -i -H "AUTHORIZATION: Bearer $token" https://localhost:$port/orders/view)
+  response=$(curl -k -i -H "AUTHORIZATION: Bearer $token" https://localhost:$port/orders$port/view)
   assertNotEmpty $response
   echo -e "\nBallerina service response: $response"
   assertSuccess $response