Optimized JWT unit tests

Author: corbadoman

src/test/java/com/corbado/unit/SessionServiceTest.java

@@ -19,7 +19,6 @@
 import java.security.spec.PKCS8EncodedKeySpec;
 import java.util.ArrayList;
 import java.util.Base64;
-import java.util.Collections;
 import java.util.Date;
 import java.util.List;
 import java.util.Map;
@@ -42,6 +41,7 @@
 import com.auth0.jwk.SigningKeyNotFoundException;
 import com.auth0.jwt.JWT;
 import com.auth0.jwt.algorithms.Algorithm;
+import com.auth0.jwt.exceptions.AlgorithmMismatchException;
 import com.auth0.jwt.exceptions.IncorrectClaimException;
 import com.auth0.jwt.exceptions.JWTDecodeException;
 import com.auth0.jwt.exceptions.JWTVerificationException;
@@ -143,7 +143,7 @@ void test_testDataIsPresent() throws InvalidKeySpecException, NoSuchAlgorithmExc
    */
   @Test
   void test_testGenerateJwt() throws InvalidKeySpecException, NoSuchAlgorithmException {
-    assertNotNull(generateJwt("1", 3, 4));
+    assertNotNull(generateJwt("1", 3, 4, Algorithm.RSA256(privateKey)));
   }
 
   /**
@@ -243,7 +243,8 @@ static List<Object[]> provideJwts() throws InvalidKeySpecException, NoSuchAlgori
           generateJwt(
               "https://auth.acme.com",
               System.currentTimeMillis() / 1000 + 100,
-              System.currentTimeMillis() / 1000 + 100),
+              System.currentTimeMillis() / 1000 + 100,
+              Algorithm.RSA256(privateKey)),
           IncorrectClaimException.class
         });
 
@@ -253,7 +254,8 @@ static List<Object[]> provideJwts() throws InvalidKeySpecException, NoSuchAlgori
           generateJwt(
               "https://auth.acme.com",
               System.currentTimeMillis() / 1000 - 100,
-              System.currentTimeMillis() / 1000 - 100),
+              System.currentTimeMillis() / 1000 - 100,
+              Algorithm.RSA256(privateKey)),
           TokenExpiredException.class
         });
 
@@ -263,17 +265,30 @@ static List<Object[]> provideJwts() throws InvalidKeySpecException, NoSuchAlgori
           generateJwt(
               "https://invalid.com",
               System.currentTimeMillis() / 1000 + 100,
-              System.currentTimeMillis() / 1000 - 100),
+              System.currentTimeMillis() / 1000 - 100,
+              Algorithm.RSA256(privateKey)),
           IncorrectClaimException.class
         });
 
+    // Invalid alg "none"
+    testData.add(
+        new Object[] {
+          generateJwt(
+              "https://auth.acme.com",
+              System.currentTimeMillis() / 1000 + 100,
+              System.currentTimeMillis() / 1000 - 100,
+              Algorithm.none()),
+          AlgorithmMismatchException.class
+        });
+
     // Success
     testData.add(
         new Object[] {
           generateJwt(
               "https://auth.acme.com",
               System.currentTimeMillis() / 1000 + 100,
-              System.currentTimeMillis() / 1000 - 100),
+              System.currentTimeMillis() / 1000 - 100,
+              Algorithm.RSA256(privateKey)),
           null
         });
 
@@ -317,12 +332,11 @@ private static RSAPrivateKey readPrivateKey(final String privateKeyPath)
    * @throws InvalidKeySpecException the invalid key spec exception
    * @throws NoSuchAlgorithmException the no such algorithm exception
    */
-  private static String generateJwt(final String iss, final long exp, final long nbf)
+  private static String generateJwt(final String iss, final long exp, final long nbf, final Algorithm algorithm)
       throws InvalidKeySpecException, NoSuchAlgorithmException {
 
-    final Algorithm algorithm = Algorithm.RSA256(privateKey);
     return JWT.create()
-        .withHeader(Collections.singletonMap("kid", "kid123"))
+        .withHeader(Map.of("kid", "kid123"))
         .withIssuer(iss)
         .withIssuedAt(new Date())
         .withExpiresAt(new Date(exp * 1000L))