@kya-os/contracts 1.8.0 → 1.9.0

package/parity-vectors/vc-jwt.json

@@ -0,0 +1,210 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "name": "VC-JWT verification test vectors",
+  "description": "Test vectors for VC-JWT parsing and verification parity between TypeScript and Rust",
+  "version": "1.0.0",
+  "vectors": [
+    {
+      "id": "valid-jwt-parse",
+      "description": "Parse a valid JWT structure",
+      "input": {
+        "jwt": "eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtoYVhnQlpEdm90RGtMNTI1N2ZhaXp0aUdpQzJRdEtMR3Bibm5FR3RhMmRvSyIsInN1YiI6ImRpZDprZXk6ejZNa2hhWGdCWkR2b3REa0w1MjU3ZmFpenRpR2lDMlF0S0xHcGJubkVHdGEyZG9LIiwiYXVkIjoidGVzdC1hdWRpZW5jZSIsImlhdCI6MTcwNDA2NzIwMH0.signature-placeholder"
+      },
+      "expected": {
+        "success": true,
+        "header": {
+          "alg": "EdDSA",
+          "typ": "JWT"
+        },
+        "payload": {
+          "iss": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK",
+          "sub": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK",
+          "aud": "test-audience"
+        }
+      }
+    },
+    {
+      "id": "valid-jwt-no-typ",
+      "description": "Parse JWT without typ header (allowed)",
+      "input": {
+        "jwt": "eyJhbGciOiJFZERTQSJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtoYVhnQlpEdm90RGtMNTI1N2ZhaXp0aUdpQzJRdEtMR3Bibm5FR3RhMmRvSyJ9.signature"
+      },
+      "expected": {
+        "success": true,
+        "header": {
+          "alg": "EdDSA",
+          "typ": null
+        }
+      }
+    },
+    {
+      "id": "valid-jwt-typ-lowercase",
+      "description": "Parse JWT with lowercase typ (allowed)",
+      "input": {
+        "jwt": "eyJhbGciOiJFZERTQSIsInR5cCI6Imp3dCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtoYVhnQlpEdm90RGtMNTI1N2ZhaXp0aUdpQzJRdEtMR3Bibm5FR3RhMmRvSyJ9.signature"
+      },
+      "expected": {
+        "success": true,
+        "header": {
+          "alg": "EdDSA",
+          "typ": "jwt"
+        }
+      }
+    },
+    {
+      "id": "invalid-wrong-algorithm",
+      "description": "Reject JWT with wrong algorithm",
+      "input": {
+        "jwt": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWsiLCJzdWIiOiJ0ZXN0In0.signature"
+      },
+      "expected": {
+        "success": false,
+        "errorType": "WrongAlgorithm",
+        "errorMessage": "Expected EdDSA, got RS256"
+      }
+    },
+    {
+      "id": "invalid-wrong-type",
+      "description": "Reject JWT with wrong type",
+      "input": {
+        "jwt": "eyJhbGciOiJFZERTQSIsInR5cCI6IkpXRSJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWsiLCJzdWIiOiJ0ZXN0In0.signature"
+      },
+      "expected": {
+        "success": false,
+        "errorType": "WrongType",
+        "errorMessage": "Expected JWT, got JWE"
+      }
+    },
+    {
+      "id": "invalid-malformed-not-three-parts",
+      "description": "Reject malformed JWT (not 3 parts)",
+      "input": {
+        "jwt": "header.payload"
+      },
+      "expected": {
+        "success": false,
+        "errorType": "InvalidFormat",
+        "errorMessage": "JWT must have 3 parts"
+      }
+    },
+    {
+      "id": "invalid-malformed-empty",
+      "description": "Reject empty JWT",
+      "input": {
+        "jwt": ""
+      },
+      "expected": {
+        "success": false,
+        "errorType": "InvalidFormat"
+      }
+    },
+    {
+      "id": "invalid-malformed-too-many-parts",
+      "description": "Reject JWT with too many parts",
+      "input": {
+        "jwt": "a.b.c.d"
+      },
+      "expected": {
+        "success": false,
+        "errorType": "InvalidFormat",
+        "errorMessage": "JWT must have 3 parts"
+      }
+    },
+    {
+      "id": "invalid-bad-base64-header",
+      "description": "Reject JWT with invalid base64 in header",
+      "input": {
+        "jwt": "not-valid-base64!!!.eyJpc3MiOiJ0ZXN0In0.signature"
+      },
+      "expected": {
+        "success": false,
+        "errorType": "InvalidBase64"
+      }
+    },
+    {
+      "id": "invalid-bad-json-header",
+      "description": "Reject JWT with invalid JSON in header",
+      "input": {
+        "jwt": "bm90LWpzb24.eyJpc3MiOiJ0ZXN0In0.signature"
+      },
+      "expected": {
+        "success": false,
+        "errorType": "InvalidJson"
+      }
+    },
+    {
+      "id": "valid-extract-issuer-string",
+      "description": "Extract issuer from JWT payload (string format)",
+      "input": {
+        "jwt": "eyJhbGciOiJFZERTQSJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtoYVhnQlpEdm90RGtMNTI1N2ZhaXp0aUdpQzJRdEtMR3Bibm5FR3RhMmRvSyJ9.sig"
+      },
+      "expected": {
+        "success": true,
+        "issuer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK"
+      }
+    },
+    {
+      "id": "valid-extract-issuer-object",
+      "description": "Extract issuer from JWT payload (object format with id)",
+      "input": {
+        "jwt": "eyJhbGciOiJFZERTQSJ9.eyJpc3MiOnsiaWQiOiJkaWQ6a2V5Ono2TWtoYVhnQlpEdm90RGtMNTI1N2ZhaXp0aUdpQzJRdEtMR3Bibm5FR3RhMmRvSyJ9fQ.sig"
+      },
+      "expected": {
+        "success": true,
+        "issuer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK"
+      }
+    },
+    {
+      "id": "invalid-missing-issuer",
+      "description": "Reject JWT without issuer",
+      "input": {
+        "jwt": "eyJhbGciOiJFZERTQSJ9.eyJzdWIiOiJ0ZXN0In0.signature"
+      },
+      "expected": {
+        "success": false,
+        "errorType": "MissingIssuer"
+      }
+    }
+  ],
+  "signatureVerificationVectors": [
+    {
+      "id": "verify-valid-signature",
+      "description": "Verify a JWT with valid Ed25519 signature",
+      "input": {
+        "jwt": "eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtoYVhnQlpEdm90RGtMNTI1N2ZhaXp0aUdpQzJRdEtMR3Bibm5FR3RhMmRvSyIsInN1YiI6InRlc3QiLCJpYXQiOjE3MDQwNjcyMDB9.ACTUAL_SIGNATURE_NEEDED",
+        "publicKeyHex": "8520f0098930a754748b7ddcb43ef75a0dbf3a0d26381af4eba4a98eaa9b4e6a"
+      },
+      "expected": {
+        "success": true,
+        "verified": true
+      },
+      "note": "This vector requires generating a real signature for end-to-end testing"
+    },
+    {
+      "id": "verify-invalid-signature",
+      "description": "Reject JWT with invalid signature",
+      "input": {
+        "jwt": "eyJhbGciOiJFZERTQSJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWsiLCJzdWIiOiJ0ZXN0In0.aW52YWxpZC1zaWduYXR1cmU",
+        "publicKeyHex": "8520f0098930a754748b7ddcb43ef75a0dbf3a0d26381af4eba4a98eaa9b4e6a"
+      },
+      "expected": {
+        "success": false,
+        "verified": false,
+        "errorType": "InvalidSignature"
+      }
+    },
+    {
+      "id": "verify-wrong-public-key",
+      "description": "Reject JWT verified with wrong public key",
+      "input": {
+        "jwt": "eyJhbGciOiJFZERTQSJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWsiLCJzdWIiOiJ0ZXN0In0.some-signature",
+        "publicKeyHex": "0000000000000000000000000000000000000000000000000000000000000000"
+      },
+      "expected": {
+        "success": false,
+        "verified": false,
+        "errorType": "InvalidSignature"
+      }
+    }
+  ]
+}