implement JWE tests

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

Author: julien-nc

.github/workflows/integration.yml

@@ -24,18 +24,6 @@ jobs:
         databases: ['sqlite', 'mysql', 'pgsql']
         server-versions: ['master']
         include:
-            - php-versions: 8.1
-              databases: mysql
-              server-versions: stable29
-            - php-versions: 8.1
-              databases: mysql
-              server-versions: stable30
-            - php-versions: 8.1
-              databases: mysql
-              server-versions: stable31
-            - php-versions: 8.1
-              databases: mysql
-              server-versions: stable32
             - php-versions: 8.3
               databases: mysql
               server-versions: master

.github/workflows/lint.yml

@@ -16,7 +16,7 @@ jobs:
 
     strategy:
       matrix:
-        php-versions: ['8.0', '8.1', '8.2', '8.3', '8.4']
+        php-versions: ['8.2', '8.3', '8.4']
 
     name: php${{ matrix.php-versions }}
     steps:
@@ -36,7 +36,7 @@ jobs:
 
     strategy:
       matrix:
-        php-versions: ['8.0']
+        php-versions: ['8.2']
 
     name: cs php${{ matrix.php-versions }}
     steps:

.github/workflows/phpunit.yml

@@ -21,7 +21,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        php-versions: ['8.1', '8.2', '8.3']
+        php-versions: ['8.2', '8.3']
         databases: ['mysql']
         server-versions: ['stable29', 'stable30', 'stable31', 'stable32', 'master']
         include:
@@ -34,10 +34,6 @@ jobs:
           - php-versions: 8.4
             databases: mysql
             server-versions: master
-        exclude:
-          - php-versions: 8.1
-            databases: mysql
-            server-versions: master
 
     name: php${{ matrix.php-versions }}-${{ matrix.databases }}-${{ matrix.server-versions }}
 

lib/Service/JweService.php

@@ -146,7 +146,6 @@ public function decryptSerializedJwe(string $serializedJwe, array $jwkArray): st
 	}
 
 	public function debug(): array {
-		// get encryption key, both formats
 		$myPemEncryptionKey = $this->jwkService->getMyEncryptionKey(true);
 		$sslEncryptionKey = openssl_pkey_get_private($myPemEncryptionKey);
 		$sslEncryptionKeyDetails = openssl_pkey_get_details($sslEncryptionKey);

tests/unit/Service/JweServiceTest.php

@@ -0,0 +1,54 @@
+<?php
+
+/**
+ * SPDX-FileCopyrightText: 2025 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+declare(strict_types=1);
+
+
+use OCA\UserOIDC\Service\JweService;
+use OCA\UserOIDC\Service\JwkService;
+use OCP\AppFramework\Services\IAppConfig;
+use PHPUnit\Framework\MockObject\MockObject;
+use PHPUnit\Framework\TestCase;
+
+class JweServiceTest extends TestCase {
+
+	/** @var IAppConfig|MockObject */
+	private $appConfig;
+	/** @var JwkService|MockObject */
+	private $jwkService;
+	/** @var JweService|MockObject */
+	private $jweService;
+
+	public function setUp(): void {
+		parent::setUp();
+		$this->appConfig = $this->createMock(IAppConfig::class);
+		$this->jwkService = new JwkService($this->appConfig);
+		$this->jweService = new JweService($this->jwkService);
+	}
+
+	public function testJweEncryptionDecryption() {
+		$myPemEncryptionKey = $this->jwkService->getMyEncryptionKey(true);
+		$sslEncryptionKey = openssl_pkey_get_private($myPemEncryptionKey);
+		$sslEncryptionKeyDetails = openssl_pkey_get_details($sslEncryptionKey);
+		$encPublicJwk = $this->jwkService->getJwkFromSslKey($sslEncryptionKeyDetails, isEncryptionKey: true);
+		$encPrivJwk = $this->jwkService->getJwkFromSslKey($sslEncryptionKeyDetails, isEncryptionKey: true, includePrivateKey: true);
+
+		$inputPayloadArray = [
+			'iat' => time(),
+			'nbf' => time(),
+			'exp' => time() + 3600,
+			'iss' => 'My service',
+			'aud' => 'Your application',
+		];
+
+		$serializedJweToken = $this->jweService->createSerializedJwe($inputPayloadArray, $encPublicJwk);
+		$decryptedJweString = $this->jweService->decryptSerializedJwe($serializedJweToken, $encPrivJwk);
+
+		$outputPayloadArray = json_decode($decryptedJweString, true);
+		$this->assertEquals($inputPayloadArray, $outputPayloadArray);
+	}
+}