<!DOCTYPE html>
<html>
<head>
<script src="../../resources/js-test.js"></script>
<script src="resources/common.js"></script>
</head>
<body>
<p id="description"></p>
<div id="console"></div>

<script>
description("Test importing keys with various uses from JWK.");

jsTestIsAsync = true;

var extractable = true;

var aesKeyAsJSON = {
    "alg": "A128CBC",
    "ext": true,
    "kty": "oct",
    "k": "jnOw99oOZFLIEPMrgJB55Q"
};

var hmacKeyAsJSON = {
    "alg": "HS256",
    "ext": true,
    "kty": "oct",
    "k": "ahjkn-_387fgnsibf23qsvahjkn-_387fgnsibf23qs"
};

function testWithAESCBC(expectedUsages, jwkUsages, importUsages)
{
    if (jwkUsages.key_ops) {
        aesKeyAsJSON.key_ops = jwkUsages.key_ops;
        delete aesKeyAsJSON.use;
    } else {
        delete aesKeyAsJSON.key_ops;
        aesKeyAsJSON.use = jwkUsages.use;
    }

    return crypto.subtle.importKey("jwk", aesKeyAsJSON, {name: "AES-CBC"}, extractable, importUsages).then(function(result) {
        key = result;
        debug(JSON.stringify(jwkUsages) + ":");
        shouldBe("key.usages", JSON.stringify(expectedUsages));
        debug("");
    }, function(result) {
        debug(JSON.stringify(jwkUsages) + ":");
        debug("Failed importing with " + importUsages + ": " + result);
    });
}

function testWithHMAC(expectedUsages, jwkUsages, importUsages)
{
    if (jwkUsages.key_ops) {
        hmacKeyAsJSON.key_ops = jwkUsages.key_ops;
        delete hmacKeyAsJSON.use;
    } else {
        delete hmacKeyAsJSON.key_ops;
        hmacKeyAsJSON.use = jwkUsages.use;
    }

    return crypto.subtle.importKey("jwk", hmacKeyAsJSON, {name: 'hmac', hash: {name: 'sha-256'}}, extractable, importUsages).then(function(result) {
        key = result;
        debug(JSON.stringify(jwkUsages) + ":");
        shouldBe("key.usages", JSON.stringify(expectedUsages));
        debug("");
    }, function(result) {
        debug(JSON.stringify(jwkUsages) + ":");
        debug("Failed importing with " + importUsages + ": " + result);
    });
}

debug("");


Promise.all([
    // Duplicates are not allowed.
    testWithAESCBC(null, {key_ops: ["encrypt", "encrypt"]}, ["encrypt"]),

    testWithAESCBC(["encrypt"], {key_ops: ["encrypt"]}, ["encrypt"]),
    testWithAESCBC(null, {key_ops: ["encrypt"]}, ["decrypt"]),

    testWithAESCBC(["decrypt"], {key_ops: ["decrypt"]}, ["decrypt"]),
    testWithAESCBC(null, {key_ops: ["decrypt"]}, ["encrypt"]),

    testWithAESCBC(["encrypt", "decrypt"], {key_ops: ["encrypt", "decrypt"]}, ["encrypt", "decrypt"]),
    testWithAESCBC(["encrypt"], {key_ops: ["encrypt", "decrypt"]}, ["encrypt"]),
    testWithAESCBC(null, {key_ops: ["encrypt", "decrypt"]}, ["unwrapKey"]),

    testWithAESCBC(["wrapKey"], {key_ops: ["wrapKey"]}, ["wrapKey"]),
    testWithAESCBC(null, {key_ops: ["wrapKey"]}, ["unwrapKey"]),

    testWithAESCBC(["unwrapKey"], {key_ops: ["unwrapKey"]}, ["unwrapKey"]),
    testWithAESCBC(["wrapKey", "unwrapKey"], {key_ops: ["wrapKey", "unwrapKey"]}, ["unwrapKey", "wrapKey"]),
    testWithAESCBC(["encrypt", "decrypt", "wrapKey"], {key_ops: ["encrypt", "decrypt", "wrapKey"]}, ["decrypt", "encrypt", "wrapKey"]),

    testWithAESCBC(["encrypt", "decrypt", "wrapKey", "unwrapKey"], {use: "enc"}, ["decrypt", "encrypt", "unwrapKey", "wrapKey"]),
    testWithAESCBC(["encrypt", "decrypt", "unwrapKey"], {use: "enc"}, ["decrypt", "encrypt", "unwrapKey"]),
    testWithAESCBC(["encrypt", "decrypt", "unwrapKey"], {use: "enc"}, ["decrypt", "encrypt", "unwrapKey"]),

    testWithHMAC(["sign"], {key_ops: ["sign"]}, ["sign"]),
    testWithHMAC(null, {key_ops: ["sign"]}, ["verify"]),

    testWithHMAC(["verify"], {key_ops: ["verify"]}, ["verify"]),
    testWithHMAC(null, {key_ops: ["verify"]}, ["sign"]),

    testWithHMAC(["sign", "verify"], {use: "sig"}, ["sign", "verify"]),
    testWithHMAC(["sign"], {use: "sig"}, ["sign"]),

    // Unknown key_ops strings are ignored.
    testWithAESCBC(["decrypt"], {key_ops: ["'encrypt'", "decrypt"]}, ["decrypt"]),
    testWithAESCBC(["decrypt"], {key_ops: ["encrypt ", "foo", "decrypt"]}, ["decrypt"]),
    testWithAESCBC(["decrypt"], {key_ops: ["Encrypt", "decrypt"]}, ["decrypt"]),
    testWithAESCBC(null, {key_ops: ["'encrypt'", "decrypt"]}, ["encrypt"]),
    testWithAESCBC(null, {key_ops: ["encrypt "]}, ["encrypt"]),
    testWithAESCBC(null, {key_ops: ["Encrypt"]}, ["encrypt"]),

]).then(finishJSTest, failAndFinishJSTest);
</script>

</body>
</html>