mirror of
https://github.com/jpace121/j7s-jwt-mosquitto-auth.git
synced 2026-11-03 15:27:46 +00:00
Mass refactor. Clang-format. Start adding tests. Use FetchContent.
This commit is contained in:
jimmy committed
1 parent
c76ff553cc
commit
3309b19c2e
19 files changed
+310
-223
No files matched your search
@@ -0,0 +1,10 @@
|
||||
#include <j7s-plugin/Authorizer.hpp>
|
||||
#include "gtest/gtest.h"
|
||||
|
||||
// Demonstrate some basic assertions.
|
||||
TEST(AuthorizerTest, BasicAssertions) {
|
||||
// Expect two strings not to be equal.
|
||||
EXPECT_STRNE("hello", "world");
|
||||
// Expect equality.
|
||||
EXPECT_EQ(7 * 6, 42);
|
||||
}
|
||||
@@ -1,33 +0,0 @@
|
||||
import requests
|
||||
import json
|
||||
import time
|
||||
import jwt
|
||||
|
||||
# Get urls.
|
||||
well_known = requests.get("https://auth.jpace121.net/realms/jpace121-main/.well-known/openid-configuration")
|
||||
well_known = well_known.json()
|
||||
auth_url = well_known['device_authorization_endpoint']
|
||||
token_url = well_known['token_endpoint']
|
||||
|
||||
header = {"Content-Type":"application/x-www-form-urlencoded"}
|
||||
data = {"client_id" : "jpace-mqtt"}
|
||||
|
||||
r = requests.post(auth_url, headers=header, data=data)
|
||||
r_json = r.json()
|
||||
|
||||
print("Go to: {} to login.".format(r_json['verification_uri_complete']))
|
||||
|
||||
data['grant_type'] = "urn:ietf:params:oauth:grant-type:device_code"
|
||||
data['device_code'] = r_json['device_code']
|
||||
|
||||
for index in range(1, 20):
|
||||
r = requests.post(token_url, headers=header, data=data)
|
||||
if 'access_token' in r.json():
|
||||
break
|
||||
time.sleep(r_json['interval'])
|
||||
|
||||
public_key = b"-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIKdtC04YbRMO0L4ID4YOWLr2AxYpQZYZ3g9BNpVm+IjDdn4H5HaYwYvOcbdjKyRdmwm+rsrIbWxCGYQCD5TtaCnq1IGwOueoprgCTDNSpTxsKQ+JuEUIhKc4rygVhX7JKIvVikfWimKVuNJBVhut/O+/N0AarasszAyinc3gjwtu2SyLBdZtIe3Krs1MIvYb786J2RhK3GfLzrXVzmKjA2/ThB9D6sS7dtZCe//37kYZzGUv5+xFkjkKwZr2aULMlmpUosFd/S2w3zsZkGRELLTvdRf5PVKeGpk40EneETJAHwiMjX6+jO/vlFQIj/Ye66ypVhCCI+NizE/hWbdawIDAQAB\n-----END PUBLIC KEY-----"
|
||||
|
||||
#decoded = jwt.decode(r.json()['access_token'], audience=None, options={"verify_signature": False, 'verify_aud': False})
|
||||
decoded = jwt.decode(r.json()['access_token'], public_key, algorithms=['RS256'])
|
||||
print('Decoded: {}'.format(decoded))
|
||||
@@ -1,3 +0,0 @@
|
||||
-----BEGIN PUBLIC KEY-----
|
||||
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIKdtC04YbRMO0L4ID4YOWLr2AxYpQZYZ3g9BNpVm+IjDdn4H5HaYwYvOcbdjKyRdmwm+rsrIbWxCGYQCD5TtaCnq1IGwOueoprgCTDNSpTxsKQ+JuEUIhKc4rygVhX7JKIvVikfWimKVuNJBVhut/O+/N0AarasszAyinc3gjwtu2SyLBdZtIe3Krs1MIvYb786J2RhK3GfLzrXVzmKjA2/ThB9D6sS7dtZCe//37kYZzGUv5+xFkjkKwZr2aULMlmpUosFd/S2w3zsZkGRELLTvdRf5PVKeGpk40EneETJAHwiMjX6+jO/vlFQIj/Ye66ypVhCCI+NizE/hWbdawIDAQAB
|
||||
-----END PUBLIC KEY-----
|
||||
@@ -1,17 +0,0 @@
|
||||
per_listener_settings true
|
||||
log_type all
|
||||
|
||||
listener 8082
|
||||
protocol websockets
|
||||
allow_anonymous false
|
||||
auth_plugin /home/jimmy/Develop/mosquitto-plugin/build/libj7s-plugin.so
|
||||
auth_opt_issuer https://auth.jpace121.net/realms/jpace121-main
|
||||
auth_opt_public_key /home/jimmy/Develop/mosquitto-plugin/test/key.pem
|
||||
|
||||
listener 8081
|
||||
protocol mqtt
|
||||
allow_anonymous false
|
||||
auth_plugin /home/jimmy/Develop/mosquitto-plugin/build/libj7s-plugin.so
|
||||
auth_opt_issuer https://auth.jpace121.net/realms/jpace121-main
|
||||
auth_opt_public_key /home/jimmy/Develop/mosquitto-plugin/test/key.pem
|
||||
|
||||
@@ -1,2 +0,0 @@
|
||||
#!/usr/bin/env bash
|
||||
mosquitto_pub -u james -P test -h localhost -p 8081 -t test -m "test"
|
||||
@@ -1,39 +0,0 @@
|
||||
import requests
|
||||
import json
|
||||
import time
|
||||
import paho.mqtt.client
|
||||
import time
|
||||
|
||||
|
||||
# Get urls.
|
||||
well_known = requests.get("https://auth.jpace121.net/realms/jpace121-main/.well-known/openid-configuration").json()
|
||||
auth_url = well_known['device_authorization_endpoint']
|
||||
token_url = well_known['token_endpoint']
|
||||
|
||||
header = {"Content-Type":"application/x-www-form-urlencoded"}
|
||||
data = {"client_id" : "jpace-mqtt"}
|
||||
|
||||
# Request login.
|
||||
r = requests.post(auth_url, headers=header, data=data)
|
||||
r_json = r.json()
|
||||
print("Go to: {} to login.".format(r_json['verification_uri_complete']))
|
||||
|
||||
# Wait for token.
|
||||
data['grant_type'] = "urn:ietf:params:oauth:grant-type:device_code"
|
||||
data['device_code'] = r_json['device_code']
|
||||
for index in range(1, 20):
|
||||
r = requests.post(token_url, headers=header, data=data)
|
||||
if 'access_token' in r.json():
|
||||
break
|
||||
time.sleep(r_json['interval'])
|
||||
|
||||
token = r.json()['access_token']
|
||||
print(token)
|
||||
|
||||
client = paho.mqtt.client.Client(protocol=paho.mqtt.client.MQTTv5,
|
||||
transport="tcp")
|
||||
client.username_pw_set("jimmy", password=token)
|
||||
client.connect("localhost", port=8081)
|
||||
|
||||
print("Waiting on connection.")
|
||||
time.sleep(20)
|
||||
@@ -1,36 +0,0 @@
|
||||
import requests
|
||||
import json
|
||||
import time
|
||||
import paho.mqtt.client
|
||||
import time
|
||||
|
||||
# RESULT=`curl --cacert ./ca.pem --cert jimmy-client.pem --key jimmy-client-key.pem --data "grant_type=password&client_id=test&username=jimmy&password=1234" https://nginx-test.internal.jpace121.net:8443/realms/master/protocol/openid-connect/token`
|
||||
|
||||
s = requests.Session()
|
||||
s.verify = "/home/jimmy/Develop/mosquitto-plugin/test/ca.pem"
|
||||
s.cert = ("/home/jimmy/Develop/keycloak/jimmy-client.pem", "/home/jimmy/Develop/keycloak/jimmy-client-key.pem")
|
||||
|
||||
|
||||
# Get urls.
|
||||
print("Before get.")
|
||||
well_known = s.get("https://nginx-test.internal.jpace121.net:8443/realms/jpace121-main/.well-known/openid-configuration", ).json()
|
||||
print("After get.")
|
||||
token_url = well_known['token_endpoint']
|
||||
# Override for now, url doesn't include port...
|
||||
token_url = "https://nginx-test.internal.jpace121.net:8443/realms/jpace121-main/protocol/openid-connect/token"
|
||||
# RESULT=`curl --cacert ./ca.pem --cert jimmy-client.pem --key jimmy-client-key.pem --data "grant_type=password&client_id=mqtt&username=jimmy&password=1234" https://nginx-test.internal.jpace121.net:8443/realms/jpace121-main/protocol/openid-connect/token`
|
||||
|
||||
|
||||
data = {"grant_type" : "password", "client_id" : "mqtt", "username" : "jimmy", "password": "1234"}
|
||||
|
||||
# Request token.
|
||||
r = s.post(token_url, data=data)
|
||||
token = r.json()['access_token']
|
||||
|
||||
client = paho.mqtt.client.Client(protocol=paho.mqtt.client.MQTTv5,
|
||||
transport="tcp")
|
||||
client.username_pw_set("jimmy", password=token)
|
||||
client.connect("localhost", port=8081)
|
||||
|
||||
print("Waiting on connection.")
|
||||
time.sleep(20)
|
||||
@@ -1,2 +0,0 @@
|
||||
#!/usr/bin/env bash
|
||||
/usr/sbin/mosquitto -v -c $PWD/mosquitto.conf
|
||||
Reference in new issue
Block a user