diff --git a/src/test/kotlin/fr/gouv/stopc/submissioncode/controller/VerifyControllerTest.kt b/src/test/kotlin/fr/gouv/stopc/submissioncode/controller/VerifyControllerTest.kt index 5da0dc13d045e5c529c7907b7807892a38777400..1e7d85989880d197c4dcd18bf7baf0865d11ba07 100644 --- a/src/test/kotlin/fr/gouv/stopc/submissioncode/controller/VerifyControllerTest.kt +++ b/src/test/kotlin/fr/gouv/stopc/submissioncode/controller/VerifyControllerTest.kt @@ -311,6 +311,16 @@ class VerifyControllerTest { givenJwt(kid = "AnotherKID"), "JWT signature is invalid:" ), + Arguments.of( + "the alg field is missing", + givenJwt().replaceBefore(".", Base64.getEncoder().encodeToString("""{"kid": "TousAntiCovidKID","typ":"JWT"}""".toByteArray())), + "JWT could not be parsed: Invalid JWS header: Missing \"alg\" in header JSON object," + ), + Arguments.of( + "the JWT header is corrupt", + givenJwt().replaceBefore(".", "Z"), + "JWT could not be parsed: NullPointerException," + ), ) }