media_cdn/spec/dualtoken_spec.rb

# Copyright 2023 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

require "time"
require_relative "../dualtoken"
require "rspec"

describe "Google Media CDN dual token test" do
    before :all do
        @start_time = Time.utc 2022, 9, 13, 0
        @expires_time = Time.utc 2022, 9, 13, 12
        @session_id = "test-id"
        @data = "test-data"
        @ip_ranges = "203.0.113.0/24,2001:db8:4a7f:a732/64"
        @headers = [{ name: "Foo", value: "bar" }, { name: "BAZ", value: "quux" }]
    end

    it "test_sign_token_for_ed25519_url_prefix" do
        expect(
            sign_token(
                base64_key: "DJUcnLguVFKmVCFnWGubG1MZg7fWAnxacMjKDhVZMGI=",
                signature_algorithm: :ed25519,
                expiration_time: @expires_time,
                url_prefix: "http://10.20.30.40/"
            )
        ).to eq "URLPrefix=aHR0cDovLzEwLjIwLjMwLjQwLw~Expires=1663070400~Signature=OQLXEjnApFGJaGZ_jvp2R7VY5q3ic-HT3igFpi9iPsJRXtQuvPF4cxZUT-rtCqzteXx3vSRhk09FxgDQauO_DA"
    end

    it "test_sign_token_for_ed25519_path_glob" do
        expect(
            sign_token(
                base64_key: "DJUcnLguVFKmVCFnWGubG1MZg7fWAnxacMjKDhVZMGI=",
                signature_algorithm: :ed25519,
                expiration_time: @expires_time,
                path_globs: "/*"
            )
        ).to eq "PathGlobs=/*~Expires=1663070400~Signature=9pBdD_6O6LB-4V67HZ_SOc2G_jIkSZ_tMsKnVqElmPlwKB_xDiW7DKAnv8L8CmweeZquaLFlnLogbMcIV8bNCQ"
    end

    it "test_sign_token_for_ed25519_full_path" do
        expect(
            sign_token(
                base64_key: "DJUcnLguVFKmVCFnWGubG1MZg7fWAnxacMjKDhVZMGI=",
                signature_algorithm: :ed25519,
                expiration_time: @expires_time,
                full_path: "/example.m3u8"
            )
        ).to eq "FullPath~Expires=1663070400~Signature=X74OTNjtseIUmsab-YiOTZ8jyX_KG7v4YQWwcFpfFmjhzaX8NdweMc9Wglj8wxEsEW85g3_MBG3T9jzLZFQDCw"
    end

    it "test_sign_token_for_sha1_url_prefix" do
        expect(
            sign_token(
                base64_key: "g_SlMILiIWKqsC6Z2L7gy0sReDOqtSrJrE7CXNr5Nl8=",
                signature_algorithm: :sha1,
                expiration_time: @expires_time,
                url_prefix: "http://10.20.30.40/"
            )
        ).to eq "URLPrefix=aHR0cDovLzEwLjIwLjMwLjQwLw~Expires=1663070400~hmac=6f5b4bb82536810d5ee111cba3e534d49c6ac3cb"
    end

    it "test_sign_token_for_sha1_path_glob" do
        expect(
            sign_token(
                base64_key: "g_SlMILiIWKqsC6Z2L7gy0sReDOqtSrJrE7CXNr5Nl8=",
                signature_algorithm: :sha1,
                expiration_time: @expires_time,
                path_globs: "/*"
            )
        ).to eq "PathGlobs=/*~Expires=1663070400~hmac=c1c446eea24faa31392519f975fea7eefb945625"
    end

    it "test_sign_token_for_sha1_full_path" do
        expect(
            sign_token(
                base64_key: "g_SlMILiIWKqsC6Z2L7gy0sReDOqtSrJrE7CXNr5Nl8=",
                signature_algorithm: :sha1,
                expiration_time: @expires_time,
                full_path: "/example.m3u8"
            )
        ).to eq "FullPath~Expires=1663070400~hmac=7af78177d6bc001d5626eefe387b1774a4a99ca2"
    end

    it "test_sign_token_for_sha256_url_prefix" do
        expect(
            sign_token(
                base64_key: "g_SlMILiIWKqsC6Z2L7gy0sReDOqtSrJrE7CXNr5Nl8=",
                signature_algorithm: :sha256,
                expiration_time: @expires_time,
                url_prefix: "http://10.20.30.40/"
            )
        ).to eq "URLPrefix=aHR0cDovLzEwLjIwLjMwLjQwLw~Expires=1663070400~hmac=409722313cf6d987da44bb360e60dccc3d79764520fc5e3b57654e1d4d2c862e"
    end

    it "test_sign_token_for_sha256_path_glob" do
        expect(
            sign_token(
                base64_key: "g_SlMILiIWKqsC6Z2L7gy0sReDOqtSrJrE7CXNr5Nl8=",
                signature_algorithm: :sha256,
                expiration_time: @expires_time,
                path_globs: "/*"
            )
        ).to eq "PathGlobs=/*~Expires=1663070400~hmac=9439ecdd5c4919f76f915dea72afa85a045579794e63d8cda664f5a1140c8d93"
    end

    it "test_sign_token_for_sha256_full_path" do
        expect(
            sign_token(
                base64_key: "g_SlMILiIWKqsC6Z2L7gy0sReDOqtSrJrE7CXNr5Nl8=",
                signature_algorithm: :sha256,
                expiration_time: @expires_time,
                full_path: "/example.m3u8"
            )
        ).to eq "FullPath~Expires=1663070400~hmac=365b41fd77297371d890fc9a56e4e3d3baa4c7afbd230a0e9a81c8e1bcab9420"
    end

    it "test_sign_token_for_ed25519_all_params" do
        expect(
            sign_token(
                base64_key: "DJUcnLguVFKmVCFnWGubG1MZg7fWAnxacMjKDhVZMGI=",
                signature_algorithm: :ed25519,
                start_time: @start_time,
                expiration_time: @expires_time,
                path_globs: "/*",
                session_id: @session_id,
                data: @data,
                headers: @headers,
                ip_ranges: @ip_ranges
            )
        ).to eq "PathGlobs=/*~Starts=1663027200~Expires=1663070400~SessionID=test-id~Data=test-data~Headers=Foo,BAZ~IPRanges=MjAzLjAuMTEzLjAvMjQsMjAwMTpkYjg6NGE3ZjphNzMyLzY0~Signature=A7u67hveGxGvP8KBWZlUuH0IsqhS4a2lcsXwy3uc4X3zaVuw7LY-2FQT1ZF8UxkSFAsDS3_0LYnXwXB2XdepDg"
    end

    it "test_sign_token_for_sha1_all_params" do
        expect(
            sign_token(
                base64_key: "g_SlMILiIWKqsC6Z2L7gy0sReDOqtSrJrE7CXNr5Nl8=",
                signature_algorithm: :sha1,
                start_time: @start_time,
                expiration_time: @expires_time,
                path_globs: "/*",
                session_id: @session_id,
                data: @data,
                headers: @headers,
                ip_ranges: @ip_ranges
            )
        ).to eq "PathGlobs=/*~Starts=1663027200~Expires=1663070400~SessionID=test-id~Data=test-data~Headers=Foo,BAZ~IPRanges=MjAzLjAuMTEzLjAvMjQsMjAwMTpkYjg6NGE3ZjphNzMyLzY0~hmac=b8242e8b76cbfbbd61b3540ed0eb60a2ec2fdbdb"
    end

    it "test_sign_token_for_sha256_all_params" do
        expect(
            sign_token(
                base64_key: "g_SlMILiIWKqsC6Z2L7gy0sReDOqtSrJrE7CXNr5Nl8=",
                signature_algorithm: :sha256,
                start_time: @start_time,
                expiration_time: @expires_time,
                path_globs: "/*",
                session_id: @session_id,
                data: @data,
                headers: @headers,
                ip_ranges: @ip_ranges
            )
        ).to eq "PathGlobs=/*~Starts=1663027200~Expires=1663070400~SessionID=test-id~Data=test-data~Headers=Foo,BAZ~IPRanges=MjAzLjAuMTEzLjAvMjQsMjAwMTpkYjg6NGE3ZjphNzMyLzY0~hmac=dda9c3d6f3b2e867a09fbb76209ea138dd81f8512210f970d1e92f90927bef4b"
    end
end