1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
|
#!/bin/bash
#
# Setup script for scitokens-cpp integration tests
# Creates TLS certificates, keys, JWKS, and launches test server
#
set -e
TEST_NAME=${1:-integration}
if [ -z "$BINARY_DIR" ]; then
echo "\$BINARY_DIR environment variable is not set; cannot run test"
exit 1
fi
if [ -z "$SOURCE_DIR" ]; then
echo "\$SOURCE_DIR environment variable is not set; cannot run test"
exit 1
fi
echo "Setting up integration test environment for $TEST_NAME"
# Create test directory
TEST_DIR="$BINARY_DIR/tests/$TEST_NAME"
mkdir -p "$TEST_DIR"
RUNDIR=$(mktemp -d -p "$TEST_DIR" test_run.XXXXXXXX)
chmod 0755 "$RUNDIR"
if [ ! -d "$RUNDIR" ]; then
echo "Failed to create test run directory; cannot run test"
exit 1
fi
echo "Using $RUNDIR as the test run directory"
cd "$RUNDIR"
# Create link to rundir at fixed location for tests to find
if [ -L "$TEST_DIR/current" ]; then
rm "$TEST_DIR/current"
fi
ln -sf "$RUNDIR" "$TEST_DIR/current"
############################
# Generate TLS certificates
############################
echo "Generating TLS CA and host certificate..."
# Generate CA key and certificate
openssl genrsa -out ca-key.pem 2048 2>/dev/null
openssl req -new -x509 -days 365 -key ca-key.pem -out ca-cert.pem \
-subj "/C=US/ST=Test/L=Test/O=SciTokens Test/CN=Test CA" 2>/dev/null
# Generate server key and certificate
openssl genrsa -out server-key.pem 2048 2>/dev/null
openssl req -new -key server-key.pem -out server.csr \
-subj "/C=US/ST=Test/L=Test/O=SciTokens Test/CN=localhost" 2>/dev/null
# Create server certificate signed by CA with proper extensions
cat > server-cert-ext.cnf <<EOF
subjectAltName = DNS:localhost,IP:127.0.0.1
basicConstraints = CA:FALSE
keyUsage = digitalSignature, keyEncipherment
extendedKeyUsage = serverAuth
EOF
openssl x509 -req -days 365 -in server.csr -CA ca-cert.pem -CAkey ca-key.pem \
-CAcreateserial -out server-cert.pem -extfile server-cert-ext.cnf 2>/dev/null
echo "TLS certificates created"
##########################
# Generate signing keys and JWKS
##########################
echo "Generating EC signing keys and JWKS..."
# Use scitokens-generate-jwks to create keys and JWKS
if [ ! -f "$BINARY_DIR/scitokens-generate-jwks" ]; then
echo "Error: scitokens-generate-jwks not found in $BINARY_DIR"
echo "Please build the project first with: make scitokens-generate-jwks"
exit 1
fi
"$BINARY_DIR/scitokens-generate-jwks" \
--kid "test-key-1" \
--jwks jwks.json \
--private signing-key.pem \
--public signing-pub.pem
if [ ! -f jwks.json ]; then
echo "Failed to generate JWKS"
exit 1
fi
echo "Signing keys and JWKS created"
##########################
# Start Python web server
##########################
echo "Starting JWKS web server..."
# Clean up old server ready file to avoid stale data
READY_FILE="$TEST_DIR/server_ready"
rm -f "$READY_FILE"
# Start server in background, detached from terminal
python3 "$SOURCE_DIR/test/jwks_server.py" \
--jwks "$RUNDIR/jwks.json" \
--build-dir "$BINARY_DIR" \
--test-name "$TEST_NAME" \
--cert "$RUNDIR/server-cert.pem" \
--key "$RUNDIR/server-key.pem" \
</dev/null >/dev/null 2>&1 &
SERVER_PID=$!
echo "Server PID: $SERVER_PID"
# Wait for server to be ready
TIMEOUT=10
ELAPSED=0
while [ ! -f "$READY_FILE" ]; do
sleep 0.05
ELAPSED=$((ELAPSED + 1))
if [ $ELAPSED -ge $((TIMEOUT * 20)) ]; then
echo "Timeout waiting for server to start"
kill $SERVER_PID 2>/dev/null || true
exit 1
fi
# Check if server process is still running
if ! kill -0 $SERVER_PID 2>/dev/null; then
echo "Server process died unexpectedly"
exit 1
fi
done
echo "Server ready"
# Read server info from ready file
. "$READY_FILE"
# Verify we got the PID from the ready file
if [ -z "$PID" ]; then
echo "Failed to get PID from server ready file"
kill $SERVER_PID 2>/dev/null || true
exit 1
fi
if [ -z "$ISSUER_URL" ]; then
echo "Failed to get issuer URL from server"
kill $PID 2>/dev/null || true
exit 1
fi
echo "Issuer URL: $ISSUER_URL"
##########################
# Write setup.sh
##########################
cat > "$TEST_DIR/setup.sh" <<EOF
# Integration test environment
# This file is sourced by tests and teardown script
ISSUER_URL=$ISSUER_URL
SERVER_PID=$PID
SERVER_PORT=$PORT
RUNDIR=$RUNDIR
CA_CERT=$RUNDIR/ca-cert.pem
SERVER_CERT=$RUNDIR/server-cert.pem
SERVER_KEY=$RUNDIR/server-key.pem
SIGNING_KEY=$RUNDIR/signing-key.pem
SIGNING_PUB=$RUNDIR/signing-pub.pem
JWKS_FILE=$RUNDIR/jwks.json
READY_FILE=$READY_FILE
EOF
echo "Setup complete. Environment written to $TEST_DIR/setup.sh"
echo "Server PID: $PID"
echo "Issuer URL: $ISSUER_URL"
|
