import { assertEquals, assertRejects } from "jsr:@std/assert@1";
import {
  computeJwkThumbprint,
  verifyHttpSignature,
} from "./http_signatures.ts";

Deno.test("computeJwkThumbprint generates correct RFC 7638 thumbprint", async () => {
  const jwk = {
    kty: "OKP",
    crv: "Ed25519",
    x: "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo",
  };
  const fingerprint = await computeJwkThumbprint(jwk);
  // Hash of {"crv":"Ed25519","kty":"OKP","x":"11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo"}
  assertEquals(fingerprint.length, 64);
  assertEquals(typeof fingerprint, "string");
  assertEquals(
    fingerprint,
    "90facafea9b1556698540f70c0117a22ea37bd5cf3ed3c47093c1707282b4b89",
  );
});

Deno.test("verifyHttpSignature mock test - invalid headers", async () => {
  const req = new Request("http://localhost/api/test");
  await assertRejects(
    () => verifyHttpSignature(req),
    Error,
    "Missing HTTP Message Signature headers",
  );
});

Deno.test("verifyHttpSignature mock test - bad Signature-Input format", async () => {
  const req = new Request("http://localhost/api/test", {
    headers: {
      "Signature-Input": "bad format",
      "Signature": "sig1=:base64:",
    },
  });
  await assertRejects(
    () => verifyHttpSignature(req),
    Error,
    "Invalid Signature-Input format",
  );
});