Wolfgang Walther
66d40c0159
Instead of creating separate test suites for the key type, the PostgREST instance now accepts both keys via a JWKSet and the targets are generated 50/50 for both. The results are still reported seperately by using a different URL, which shows up as separate rows in the results.
60 lines
1.6 KiB
Python
60 lines
1.6 KiB
Python
# Generate HS & RSA JWK/public material for loadtests.
|
|
|
|
import argparse
|
|
import sys
|
|
from pathlib import Path
|
|
|
|
import jwcrypto.jwk as jwk
|
|
|
|
|
|
def main():
|
|
parser = argparse.ArgumentParser(
|
|
description="Generate RSA JWK/private key pair for loadtests"
|
|
)
|
|
parser.add_argument(
|
|
"--jwks",
|
|
dest="jwks_path",
|
|
metavar="JWKS_PATH",
|
|
type=Path,
|
|
required=True,
|
|
help="Path to write the JWKS file",
|
|
)
|
|
parser.add_argument(
|
|
"--private-key",
|
|
dest="private_key_path",
|
|
metavar="PRIVATE_KEY_PATH",
|
|
type=Path,
|
|
required=True,
|
|
help="Path to write the RSA private key file",
|
|
)
|
|
|
|
args = parser.parse_args()
|
|
|
|
hs = jwk.JWK.from_password("reallyreallyreallyreallyverysafe")
|
|
rsa = jwk.JWK.generate(kty="RSA", size=4096)
|
|
|
|
jwks = jwk.JWKSet()
|
|
jwks.add(hs)
|
|
jwks.add(rsa)
|
|
|
|
try:
|
|
# Technically, this exports the private keys, because HS does not have the concept
|
|
# of a public key. This is not a problem for tests, though, PostgREST can verify
|
|
# tokens with the private key just as well.
|
|
args.jwks_path.write_text(jwks.export())
|
|
print(f"Created JWKSet on {args.jwks_path}")
|
|
except OSError as e:
|
|
print(f"Error writing to {args.jwks_path}:{e}", file=sys.stderr)
|
|
sys.exit(1)
|
|
|
|
try:
|
|
args.private_key_path.write_text(rsa.export_private())
|
|
print(f"Created private key on {args.private_key_path}")
|
|
except OSError as e:
|
|
print(f"Error writing to {args.private_key_path}:{e}", file=sys.stderr)
|
|
sys.exit(1)
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main()
|