canvas-lms/spec/schemas/lti
wdransfield c25d2dfbc0 Import and validate public JWK
Closes PLAT-3739

Test Plan:
- Use the tool configuration create/update endpoint to create a new
  tool configuration. The JSON provided to the settings should
  include (in its root) a 'public_jwk' object. This object must
  take the following form:
    {
        "kty":"RSA",
	"e":"AQAB",
	"n":"2YGluUtCi62Ww_TWB38OE6wTaN..."
	"kid":"2018-09-18T21:55:18Z",
	"alg":"RS256",
	"use":"sig"
   }
- Verify a tool configuration is created
- Verify the tool configuration's developer key's public_jwk
  column is now set to the JWK from the previous step
- Verify all claims in the JWK above are required
- Verify the 'kty' claim must be 'RSA' when using the
  endpoint
- Verify the 'alg' claim must be 'RS256' when using the
  endpoint
- Verify all above verifications work when the settings JSON
  is provided directly OR provided indirectly by URL
- Verify all above verifications work when creating a new tool
  configuration OR editing an existing one

Change-Id: Iae8e9b89266611234b8ab2e47c4912b7fb1d9f2a
Reviewed-on: https://gerrit.instructure.com/165203
Reviewed-by: Marc Alan Phillips <mphillips@instructure.com>
QA-Review: Marc Alan Phillips <mphillips@instructure.com>
Tested-by: Jenkins
Product-Review: Weston Dransfield <wdransfield@instructure.com>
2018-10-02 13:06:45 +00:00
..
public_jwk_spec.rb Import and validate public JWK 2018-10-02 13:06:45 +00:00