mirror of
https://github.com/awslabs/aws-crt-php.git
synced 2026-08-17 17:47:12 +00:00
Justin Boswell
7d47316a7d
* Updated to get latest aws-crt-ffi * Added implementation for signing_result * Added main thread queue and callback queueing to signing process * Updated to get support for date on signing_config_aws * added date support to SigningConfigAWS, fixed up reference issues on http message signing * Broke C code into separate files, moved common stuff to php_aws_crt.h * Use a unity build to make PHP do the right thing with our lib * Updated aws-crt-ffi to v0.1.3 to get sigv4 changes * Added CRT::isAvailable for safe runtime detection of CRT * Fixed up test resource safety, added tests to prove it * Added CI jobs for every version of PHP on linux (#26)
98 lines
3.9 KiB
PHP
98 lines
3.9 KiB
PHP
<?php
|
|
/**
|
|
* Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
|
|
* SPDX-License-Identifier: Apache-2.0.
|
|
*/
|
|
|
|
use AWS\CRT\Auth\SignatureType;
|
|
use AWS\CRT\Auth\SigningAlgorithm;
|
|
use AWS\CRT\Auth\SigningConfigAWS;
|
|
use AWS\CRT\Auth\Signing;
|
|
use AWS\CRT\Auth\Signable;
|
|
use AWS\CRT\Auth\StaticCredentialsProvider;
|
|
use AWS\CRT\HTTP\Request;
|
|
|
|
require_once('common.inc');
|
|
|
|
final class SigningTest extends CrtTestCase {
|
|
|
|
public function testConfigAWSLifetime() {
|
|
$config = new SigningConfigAWS();
|
|
$this->assertNotNull($config, "Failed to create default SigningConfigAWS");
|
|
$config = null;
|
|
}
|
|
|
|
public function testConfigAWSConstructionWithOptions() {
|
|
$options = SigningConfigAWS::defaults();
|
|
$options['service'] = 'CRT';
|
|
$options['region'] = 'CRT';
|
|
$config = new SigningConfigAWS($options);
|
|
$this->assertNotNull($config, "Failed to create SigningConfigAWS with custom options");
|
|
$config = null;
|
|
}
|
|
|
|
public function testSignableFromHttpRequestLifetime() {
|
|
$request = new Request('GET', '/');
|
|
$signable = Signable::fromHttpRequest($request);
|
|
$this->assertNotNull($signable, "Failed to create Signable from HTTP::Request");
|
|
$signable = null;
|
|
}
|
|
|
|
public function testSignableFromChunkLifetime() {
|
|
$chunk = "THIS IS A TEST CHUNK IT CONTAINS MULTITUDES";
|
|
$stream = fopen("php://memory", 'r+');
|
|
fputs($stream, $chunk);
|
|
rewind($stream);
|
|
$signable = Signable::fromChunk($stream);
|
|
$this->assertNotNull($signable, "Failed to create Signable from chunk stream");
|
|
$signable = null;
|
|
}
|
|
|
|
public function testSignableFromCanonicalRequestLifetime() {
|
|
$canonical_request = "THIS IS A CANONICAL_REQUEST. IT IS DEEPLY CANONICAL";
|
|
$signable = Signable::fromCanonicalRequest($canonical_request);
|
|
$this->assertNotNull($signable, "Failed to create Signable from canonical request");
|
|
$signable = null;
|
|
}
|
|
|
|
const SIGV4TEST_ACCESS_KEY_ID = 'AKIDEXAMPLE';
|
|
const SIGV4TEST_SECRET_ACCESS_KEY = 'wJalrXUtnFEMI/K7MDENG+bPxRfiCYEXAMPLEKEY';
|
|
const SIGV4TEST_SESSION_TOKEN = null;
|
|
const SIGV4TEST_SERVICE = 'service';
|
|
const SIGV4TEST_REGION = 'us-east-1';
|
|
public function testSigv4HeaderSigning() {
|
|
$date = mktime(12, 36, 0, 8, 30, 2015);
|
|
$credentials_provider = new StaticCredentialsProvider([
|
|
'access_key_id' => self::SIGV4TEST_ACCESS_KEY_ID,
|
|
'secret_access_key' => self::SIGV4TEST_SECRET_ACCESS_KEY,
|
|
'session_token' => self::SIGV4TEST_SESSION_TOKEN,
|
|
]);
|
|
$signing_config = new SigningConfigAWS([
|
|
'algorithm' => SigningAlgorithm::SIGv4,
|
|
'signature_type' => SignatureType::HTTP_REQUEST_HEADERS,
|
|
'credentials_provider' => $credentials_provider,
|
|
'region' => self::SIGV4TEST_REGION,
|
|
'service' => self::SIGV4TEST_SERVICE,
|
|
'date' => $date,
|
|
]);
|
|
$http_request = new Request('GET', '/', [], ['Host' => 'example.amazonaws.com']);
|
|
$this->assertNotNull($http_request, "Unable to create HttpRequest for signing");
|
|
$signable = Signable::fromHttpRequest($http_request);
|
|
$this->assertNotNull($signable, "Unable to create signable from HttpRequest");
|
|
|
|
Signing::signRequestAws(
|
|
$signable, $signing_config,
|
|
function($signing_result, $error_code) use (&$http_request) {
|
|
$this->assertEquals(0, $error_code);
|
|
$signing_result->applyToHttpRequest($http_request);
|
|
}
|
|
);
|
|
|
|
$headers = $http_request->headers();
|
|
$this->assertEquals(
|
|
'AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20150830/us-east-1/service/aws4_request, SignedHeaders=host;x-amz-date, Signature=5fa00fa31553b73ebf1942676e86291e8372ff2a2260956d9b8aae1d763fbf31',
|
|
$headers->get('Authorization'));
|
|
$this->assertEquals('20150830T123600Z', $headers->get('X-Amz-Date'));
|
|
}
|
|
}
|