1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
import type QUnit from 'qunit'import * as lib from '../src/index.js'import { isDeno, isNode } from './env.js'
const vectors: Record<  string,  {    jwk: JsonWebKey    algorithm: AlgorithmIdentifier | RsaHashedKeyAlgorithm | EcKeyAlgorithm    thumbprint: string  }> = {  RSA: {    jwk: {      kty: 'RSA',      n: '0vx7agoebGcQSuuPiLJXZptN9nndrQmbXEps2aiAFbWhM78LhWx4cbbfAAtVT86zwu1RK7aPFFxuhDR1L6tSoc_BJECPebWKRXjBZCiFV4n3oknjhMstn64tZ_2W-5JsGY4Hc5n9yBXArwl93lqt7_RN5w6Cf0h4QyQ5v-65YGjQR0_FDW2QvzqY368QQMicAtaSqzs8KJZgnYb9c7d0zgdAZHzu6qMQvRL5hajrn1n91CbOpbISD08qNLyrdkt-bFTWhAI4vMQFh6WeZu0fM4lFd2NcRwr3XPksINHaQ-G_xBniIqbw0Ls1jF44-csFCur-kEgU8awapJzKnqDKgw',      e: 'AQAB',    },    algorithm: { name: 'RSA-PSS', hash: { name: 'SHA-256' } },    thumbprint: 'NzbLsXh8uDCcd-6MNwXF4W_7noWXFZAfHkxZsRGC9Xs',  },  EC: {    jwk: {      crv: 'P-256',      kty: 'EC',      x: 'q3zAwR_kUwtdLEwtB2oVfucXiLHmEhu9bJUFYjJxYGs',      y: '8h0D-ONoU-iZqrq28TyUxEULxuGwJZGMJYTMbeMshvI',    },    algorithm: { name: 'ECDSA', namedCurve: 'P-256' },    thumbprint: 'ZrBaai73Hi8Fg4MElvDGzIne2NsbI75RHubOViHYE5Q',  },}
if (isNode || isDeno) {  vectors.OKP = {    jwk: {      crv: 'Ed25519',      kty: 'OKP',      x: '5fL1GDeyNTIxtuzTeFnvZTo4Oz0EkMfAdhIJA-EFn0w',    },    algorithm: 'Ed25519',    thumbprint: '1OzNmMHhNzbSJyoePAtdoVedRZlFvER3K3RAzCrfX0k',  }}
export default (QUnit: QUnit) => {  const { module, test } = QUnit  module('thumbprint.ts')
  for (const [kty, { jwk, algorithm, thumbprint }] of Object.entries(vectors)) {    test(kty, async (t) => {      t.equal(        await lib.calculateJwkThumbprint(          await crypto.subtle.importKey('jwk', jwk, algorithm, true, ['verify']),        ),        thumbprint,      )    })  }
  test('private key or unrecognized public key', async (t) => {    const keypair = await crypto.subtle.generateKey({ name: 'ECDH', namedCurve: 'P-256' }, false, [      'deriveBits',    ])    await t.rejects(lib.calculateJwkThumbprint(keypair.publicKey), /UnsupportedOperationError/)    await t.rejects(      lib.calculateJwkThumbprint(keypair.privateKey),      /"key" must be an extractable public CryptoKey/,    )  })
  test('public key non-extractable key', async (t) => {    const key = await crypto.subtle.importKey(      'jwk',      {        crv: 'P-256',        kty: 'EC',        x: 'q3zAwR_kUwtdLEwtB2oVfucXiLHmEhu9bJUFYjJxYGs',        y: '8h0D-ONoU-iZqrq28TyUxEULxuGwJZGMJYTMbeMshvI',      },      { name: 'ECDSA', namedCurve: 'P-256' },      false,      [],    )    await t.rejects(      lib.calculateJwkThumbprint(key),      /"key" must be an extractable public CryptoKey/,    )  })}