kubernetes/staging/src/k8s.io/apiserver/plugin/pkg/authenticator/token/oidc/oidc_test.go

func loadRSAKey(t *testing.T, filepath string, alg jose.SignatureAlgorithm) *jose.JSONWebKey { … }

func loadRSAPrivKey(t *testing.T, filepath string, alg jose.SignatureAlgorithm) *jose.JSONWebKey { … }

func loadECDSAKey(t *testing.T, filepath string, alg jose.SignatureAlgorithm) *jose.JSONWebKey { … }

func loadECDSAPrivKey(t *testing.T, filepath string, alg jose.SignatureAlgorithm) *jose.JSONWebKey { … }

func loadKey(t *testing.T, filepath string, alg jose.SignatureAlgorithm, unmarshal func([]byte) (interface{ … }

type staticKeySet …

func (s *staticKeySet) VerifySignature(ctx context.Context, jwt string) (payload []byte, err error) { … }

var (
	expired …
	_ …
)

var (
	now …
	_ …
)

var (
	valid …
	_ …
)

type claimsTest …

// Replace formats the contents of v into the provided template.
func replace(tmpl string, v interface{ … }

// newClaimServer returns a new test HTTPS server, which is rigged to return
// OIDC responses to requests that resolve distributed claims. signer is the
// signer used for the served JWT tokens.  claimToResponseMap is a map of
// responses that the server will return for each claim it is given.
func newClaimServer(t *testing.T, keys jose.JSONWebKeySet, signer jose.Signer, claimToResponseMap map[string]string, openIDConfig *string) *httptest.Server { … }

func toKeySet(keys []*jose.JSONWebKey) jose.JSONWebKeySet { … }

func (c *claimsTest) run(t *testing.T) { … }

func TestToken(t *testing.T) { … }

func TestUnmarshalClaimError(t *testing.T) { … }

func TestUnmarshalClaim(t *testing.T) { … }

type errTransport …

func (e errTransport) RoundTrip(_ *http.Request) (*http.Response, error) { … }

func testContext(t *testing.T) context.Context { … }