public void Validate_Token_Uses_Website_Encryption_Key_If_Container_Encryption_Key_Not_Available()
{
var websiteAuthEncryptionKey = TestHelpers.GenerateKeyBytes();
var websiteAuthEncryptionStringKey = TestHelpers.GenerateKeyHexString(websiteAuthEncryptionKey);
var timeStamp = DateTime.UtcNow.AddHours(1);
using (new TestScopedEnvironmentVariable(SettingsKeys.ContainerEncryptionKey, string.Empty))
using (new TestScopedEnvironmentVariable(SettingsKeys.AuthEncryptionKey, websiteAuthEncryptionStringKey))
{
var token = SimpleWebTokenHelper.CreateToken(timeStamp, websiteAuthEncryptionKey);
Assert.True(SimpleWebTokenHelper.TryValidateToken(token, new SystemClock()));
}
}
public void Validate_Token_Uses_WebSiteAuthEncryptionKey_If_Available()
{
var containerEncryptionKey = TestHelpers.GenerateKeyBytes();
var containerEncryptionStringKey = TestHelpers.GenerateKeyHexString(containerEncryptionKey);
var websiteAuthEncryptionKey = TestHelpers.GenerateKeyBytes();
var websiteAuthEncryptionStringKey = TestHelpers.GenerateKeyHexString(websiteAuthEncryptionKey);
var timeStamp = DateTime.UtcNow.AddHours(1);
Environment.SetEnvironmentVariable(EnvironmentSettingNames.ContainerEncryptionKey, containerEncryptionStringKey);
Environment.SetEnvironmentVariable(EnvironmentSettingNames.WebSiteAuthEncryptionKey, websiteAuthEncryptionStringKey);
var token = SimpleWebTokenHelper.CreateToken(timeStamp, websiteAuthEncryptionKey);
Assert.True(SimpleWebTokenHelper.TryValidateToken(token, new SystemClock()));
}
