Bug 1990581 [wpt PR 55048] - Update JWT contents for DBSC, a=testonly

Automatic update from web-platform-tests
Update JWT contents for DBSC

This CL splits the header and payload functions in
session_binding_utils.h in order to allow for three different JWT schemas
for DBSC:
- OTFeedback disabled (both registration and refresh)
- OTFeedback enabled, registration
- OTFeedback enabled, refresh

We can clean up the Legacy* functions when removing the OTFeedback flag.

Fixed: 442623885
Change-Id: If6700157859aaa669d4fd7a7775687654b6d025a
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6977530
Commit-Queue: Daniel Rubery <druberychromium.org>
Reviewed-by: thefrog <thefrogchromium.org>
Cr-Commit-Position: refs/heads/main{#1520715}

--

wpt-commits: 5ca066a68da1ca0bccbc955d2725d922bb699405
wpt-pr: 55048

UltraBlame original commit: 7bc605a49417ce338e2717352bf664792fe9c1e3

Author: marco-c

testing/web-platform/tests/device-bound-session-credentials/jwt_helper.py

@@ -198,12 +198,12 @@
 
 key
 =
-decoded_payload
+decoded_header
 .
 get
 (
 '
-key
+jwk
 '
 )
 
@@ -587,3 +587,245 @@
 encoded_data
 )
 )
+def
+thumbprint_for_jwk
+(
+jwk
+)
+:
+    
+filtered_jwk
+=
+None
+    
+if
+jwk
+[
+'
+kty
+'
+]
+=
+=
+'
+RSA
+'
+:
+        
+filtered_jwk
+=
+dict
+(
+)
+        
+filtered_jwk
+[
+'
+kty
+'
+]
+=
+jwk
+[
+'
+kty
+'
+]
+        
+filtered_jwk
+[
+'
+n
+'
+]
+=
+jwk
+[
+'
+n
+'
+]
+        
+filtered_jwk
+[
+'
+e
+'
+]
+=
+jwk
+[
+'
+e
+'
+]
+    
+elif
+jwk
+[
+'
+kty
+'
+]
+=
+=
+'
+EC
+'
+:
+        
+filtered_jwk
+=
+dict
+(
+)
+        
+filtered_jwk
+[
+'
+kty
+'
+]
+=
+jwk
+[
+'
+kty
+'
+]
+        
+filtered_jwk
+[
+'
+crv
+'
+]
+=
+jwk
+[
+'
+crv
+'
+]
+        
+filtered_jwk
+[
+'
+x
+'
+]
+=
+jwk
+[
+'
+x
+'
+]
+        
+filtered_jwk
+[
+'
+y
+'
+]
+=
+jwk
+[
+'
+y
+'
+]
+    
+else
+:
+        
+return
+None
+    
+serialized_jwk
+=
+json
+.
+dumps
+(
+filtered_jwk
+sort_keys
+=
+True
+separators
+=
+(
+'
+'
+'
+:
+'
+)
+)
+    
+digest
+=
+hashes
+.
+Hash
+(
+hashes
+.
+SHA256
+(
+)
+)
+    
+digest
+.
+update
+(
+serialized_jwk
+.
+encode
+(
+"
+utf
+-
+8
+"
+)
+)
+    
+thumbprint_base64
+=
+base64
+.
+b64encode
+(
+digest
+.
+finalize
+(
+)
+altchars
+=
+b
+"
+-
+_
+"
+)
+.
+rstrip
+(
+b
+"
+=
+"
+)
+    
+return
+thumbprint_base64
+.
+decode
+(
+'
+ascii
+'
+)

testing/web-platform/tests/device-bound-session-credentials/refresh_session.py

@@ -341,30 +341,6 @@
 challenge
 :
 
-return
-(
-400
-response
-.
-headers
-"
-"
-)
-        
-if
-jwt_payload
-.
-get
-(
-"
-sub
-"
-)
-!
-=
-session_id_header
-:
-            
 return
 (
 400

testing/web-platform/tests/device-bound-session-credentials/start_session.py

@@ -148,12 +148,12 @@
 set_session_key
 (
 session_id
-jwt_payload
+jwt_header
 .
 get
 (
 '
-key
+jwk
 '
 )
 )