nix(loadtest): merge jwt-rsa-* and jwt-hs-* tests

Instead of creating separate test suites for the key type, the PostgREST instance now accepts both keys via a JWKSet and the targets are generated 50/50 for both. The results are still reported seperately by using a different URL, which shows up as separate rows in the results.
2026-06-26 19:33:51 +00:00
parent 2d340e8a8c
commit 66d40c0159
5 changed files with 59 additions and 90 deletions
@@ -0,0 +1,59 @@
+# Generate HS & RSA JWK/public material for loadtests.
+
+import argparse
+import sys
+from pathlib import Path
+
+import jwcrypto.jwk as jwk
+
+
+def main():
+    parser = argparse.ArgumentParser(
+        description="Generate RSA JWK/private key pair for loadtests"
+    )
+    parser.add_argument(
+        "--jwks",
+        dest="jwks_path",
+        metavar="JWKS_PATH",
+        type=Path,
+        required=True,
+        help="Path to write the JWKS file",
+    )
+    parser.add_argument(
+        "--private-key",
+        dest="private_key_path",
+        metavar="PRIVATE_KEY_PATH",
+        type=Path,
+        required=True,
+        help="Path to write the RSA private key file",
+    )
+
+    args = parser.parse_args()
+
+    hs = jwk.JWK.from_password("reallyreallyreallyreallyverysafe")
+    rsa = jwk.JWK.generate(kty="RSA", size=4096)
+
+    jwks = jwk.JWKSet()
+    jwks.add(hs)
+    jwks.add(rsa)
+
+    try:
+        # Technically, this exports the private keys, because HS does not have the concept
+        # of a public key. This is not a problem for tests, though, PostgREST can verify
+        # tokens with the private key just as well.
+        args.jwks_path.write_text(jwks.export())
+        print(f"Created JWKSet on {args.jwks_path}")
+    except OSError as e:
+        print(f"Error writing to {args.jwks_path}:{e}", file=sys.stderr)
+        sys.exit(1)
+
+    try:
+        args.private_key_path.write_text(rsa.export_private())
+        print(f"Created private key on {args.private_key_path}")
+    except OSError as e:
+        print(f"Error writing to {args.private_key_path}:{e}", file=sys.stderr)
+        sys.exit(1)
+
+
+if __name__ == "__main__":
+    main()