JUnit - testing JWT (integration test as we are fetching secret key)

* Test if token has expired

* Test if token has not expired

Author: seanmayer

src/main/java/com/appsdeveloperblog/app/ws/shared/Utils.java

@@ -1,15 +1,14 @@
 package com.appsdeveloperblog.app.ws.shared;
 
-import java.security.SecureRandom;
-import java.util.Date;
-import java.util.Random;
-import org.springframework.stereotype.Service;
-
 import com.appsdeveloperblog.app.ws.security.SecurityConstants;
 import com.appsdeveloperblog.app.ws.security.TokenUtil;
-
 import io.jsonwebtoken.Claims;
+import io.jsonwebtoken.JwtException;
 import io.jsonwebtoken.Jwts;
+import java.security.SecureRandom;
+import java.util.Date;
+import java.util.Random;
+import org.springframework.stereotype.Service;
 
 @Service
 public class Utils {
@@ -35,40 +34,49 @@ private String generateRandomString(int length) {
   }
 
   public static boolean hasTokenExpired(String token) {
-    
-    Claims claims = Jwts
-      .parser()
-      .setSigningKey(TokenUtil.getSecretKey())
-      .parseClaimsJws(token)
-      .getBody();
+    boolean returnValue = false;
+
+    try {
+      Claims claims = Jwts
+        .parser()
+        .setSigningKey(TokenUtil.getSecretKey())
+        .parseClaimsJws(token)
+        .getBody();
 
-    Date tokenExpirationDate = claims.getExpiration();
-    Date todayDate = new Date();
-    
-    return tokenExpirationDate.before(todayDate);
+      Date tokenExpirationDate = claims.getExpiration();
+      Date todayDate = new Date();
+
+      return tokenExpirationDate.before(todayDate);
+    } catch (JwtException ex) {
+      returnValue = true;
+    }
+
+    return returnValue;
   }
 
   public String generateEmailVerificationToken(String userId) {
-    
-      String token = Jwts
+    String token = Jwts
       .builder()
       .setId(userId)
-      .setExpiration(new Date(System.currentTimeMillis() + SecurityConstants.EXPIRATION_TIME))
+      .setExpiration(
+        new Date(System.currentTimeMillis() + SecurityConstants.EXPIRATION_TIME)
+      )
       .signWith(TokenUtil.getSecretKey())
       .compact();
 
-      return token;
+    return token;
   }
 
   public String generatePasswordResetToken(String userId) {
-    
     String token = Jwts
-    .builder()
-    .setId(userId)
-    .setExpiration(new Date(System.currentTimeMillis() + SecurityConstants.EXPIRATION_TIME))
-    .signWith(TokenUtil.getSecretKey())
-    .compact();
-    
+      .builder()
+      .setId(userId)
+      .setExpiration(
+        new Date(System.currentTimeMillis() + SecurityConstants.EXPIRATION_TIME)
+      )
+      .signWith(TokenUtil.getSecretKey())
+      .compact();
+
     return token;
   }
 }

src/test/java/shared/UtilsTest.java

@@ -1,10 +1,10 @@
 package shared;
 
+import static org.junit.jupiter.api.Assertions.assertFalse;
 import static org.junit.jupiter.api.Assertions.assertNotNull;
-import static org.junit.jupiter.api.Assertions.fail;
+import static org.junit.jupiter.api.Assertions.assertTrue;
 
 import org.junit.jupiter.api.BeforeEach;
-import org.junit.jupiter.api.Disabled;
 import org.junit.jupiter.api.Test;
 import org.junit.jupiter.api.extension.ExtendWith;
 import org.springframework.beans.factory.annotation.Autowired;
@@ -35,9 +35,19 @@ void testGenerateUserId() {
  }
 
  @Test
- @Disabled
+ void testHasTokenNotExpired() {
+  String token = utils.generateEmailVerificationToken("asdfghjkl");
+  assertNotNull(token);
+  boolean hasTokenExpired = utils.hasTokenExpired(token);
+  assertFalse(hasTokenExpired);
+ }
+
+ @Test
  void testHasTokenExpired() {
-  fail("Not yet implemented");
+  String expiredToken = "qwerasdfzxcv1234567890";
+  assertNotNull(expiredToken);
+  boolean hasTokenExpired = utils.hasTokenExpired(expiredToken);
+  assertTrue(hasTokenExpired);
  }
 
 }