Branch Coverage

blib/lib/Crypt/JWT.pm
Criterion Covered Total %
branch 291 432 67.3


line true false branch
36 0 87 unless defined $key
37 1 86 unless ref $key
39 48 38 if ref $key eq 'Crypt::PK::RSA'
40 38 0 if ref $key eq 'HASH' or ref $key eq 'SCALAR'
41 0 0 if ref $key eq 'ARRAY'
44 0 0 if (ref $key eq 'Crypt::OpenSSL::RSA') { }
0 0 elsif (ref($key) =~ /^Crypt::(X509|OpenSSL::X509)$/) { }
46 0 0 $key->is_private ? :
53 0 0 if defined $str and not ref $str
59 0 13 unless defined $key
60 1 12 unless ref $key
62 8 4 if ref $key eq 'Crypt::PK::ECC'
63 4 0 if ref $key eq 'HASH' or ref $key eq 'SCALAR'
64 0 0 if ref $key eq 'ARRAY'
70 0 2 unless defined $key
71 0 2 unless ref $key
73 0 2 if ref $key eq 'Crypt::PK::Ed25519'
74 2 0 if ref $key eq 'HASH' or ref $key eq 'SCALAR'
75 0 0 if ref $key eq 'ARRAY'
81 0 57 unless defined $key
82 0 57 unless ref $key
85 48 9 if ref($key) =~ /^Crypt::PK::(ECC|X25519)$/
87 9 0 if (ref $key eq 'HASH' or ref $key eq 'SCALAR')
90 9 0 if defined $rv
92 0 0 if (ref $key eq 'ARRAY')
95 0 0 if defined $rv
102 0 254 unless defined $key
103 7 247 if (ref $key eq 'HASH' and $key->{'k'} and $key->{'kty'} and $key->{'kty'} eq 'oct') { }
247 0 elsif (not ref $key) { }
114 0 4 unless defined $kid and defined $alg
115 2 2 if $kid_keys and not ref $kid_keys
116 0 4 if ref $kid_keys ne 'HASH'
118 4 0 if (exists $kid_keys->{'keys'} and ref $kid_keys->{'keys'} eq 'ARRAY') { }
121 4 4 if ($_->{'kid'} and $_->{'kty'} and $_->{'kid'} eq $kid)
130 0 0 if $kid_keys->{$kid} and not ref $kid_keys->{$kid}
132 0 4 unless $found
133 4 0 if $found->{'kty'} eq 'oct' and $alg =~ /^(HS|dir|PBES2-HS|A)/
134 0 0 if $found->{'kty'} eq 'OKP' and $alg =~ /^(EdDSA|ECDH-ES)/
135 0 0 if $found->{'kty'} eq 'EC' and $alg =~ /^(ES|EC)/
136 0 0 if $found->{'kty'} eq 'RSA' and $alg =~ /^(RS|PS)/
142 0 279 unless $b64url
144 0 279 unless $json
146 0 279 unless ref $hash eq 'HASH'
161 2 17 if $args{'auto_iat'}
162 4 15 if defined $args{'relative_exp'}
163 2 17 if defined $args{'relative_nbf'}
169 1 266 if $args{'ignore_claims'}
171 206 60 if (ref $payload ne 'HASH')
175 2 1428 if (defined $args{"verify_$claim"} and $args{"verify_$claim"} != 0)
186 45 15 if (defined $payload->{'exp'}) { }
0 30 elsif ($args{'verify_exp'} and $args{'verify_exp'} == 1) { }
187 41 4 if (not defined $args{'verify_exp'} or $args{'verify_exp'} == 1)
188 7 34 if $payload->{'exp'} + $leeway <= $now
196 30 23 if (defined $payload->{'nbf'}) { }
0 46 elsif ($args{'verify_nbf'} and $args{'verify_nbf'} == 1) { }
197 29 1 if (not defined $args{'verify_nbf'} or $args{'verify_nbf'} == 1)
198 3 26 if $payload->{'nbf'} - $leeway > $now
206 4 46 if (exists $args{'verify_iat'})
207 4 0 if (defined $payload->{'iat'}) { }
0 0 elsif ($args{'verify_iat'} and $args{'verify_iat'} == 1) { }
208 3 1 if (not defined $args{'verify_iat'} or $args{'verify_iat'} == 1)
209 2 1 if $payload->{'iat'} - $leeway > $now
220 118 47 unless defined $check
222 43 4 if (exists $payload->{$claim}) { }
223 15 28 if (ref $check eq 'Regexp') { }
14 14 elsif (ref $check eq 'CODE') { }
14 0 elsif (not ref $check) { }
225 1 14 unless defined $value
226 5 10 unless $value =~ /$check/
229 4 10 unless &$check($payload->{$claim})
233 4 10 unless defined $value and $value eq $check
248 2 2 ref $z eq 'ARRAY' ? :
249 4 0 if ($zip[0] eq 'deflate') { }
250 2 2 defined $zip[1] ? :
254 0 4 unless $d->deflate($payload, $output) == Z_OK()
255 0 4 unless $d->flush($output) == Z_OK()
256 0 4 unless $output
267 15 0 if ($z eq 'DEF') { }
271 0 15 unless $output
282 21 127 if (ref($payload) =~ /^(HASH|ARRAY)$/) { }
286 0 127 unless utf8::downgrade($payload, 1)
293 62 205 if defined $decode_payload and $decode_payload == 0
296 14 191 if ($decode_payload) { }
297 0 14 unless $de
301 51 140 defined $de ? :
310 12 103 if ($alg eq 'dir')
316 55 48 if ($enc =~ /^A(128|192|256)GCM/) { }
48 0 elsif ($enc =~ /^A(128|192|256)CBC/) { }
323 18 85 if ($alg =~ /^A(128|192|256)KW$/) { }
18 67 elsif ($alg =~ /^A(128|192|256)GCMKW$/) { }
24 43 elsif ($alg =~ /^PBES2-HS(512|384|256)\+A(128|192|256)KW$/) { }
18 25 elsif ($alg =~ /^RSA(-OAEP|-OAEP-256|1_5)$/) { }
19 6 elsif ($alg =~ /^ECDH-ES\+A(128|192|256)KW$/) { }
6 0 elsif ($alg eq 'ECDH-ES') { }
335 0 24 &looks_like_number($hdr->{'p2s'}) && $hdr->{'p2s'} >= 8 && $hdr->{'p2s'} <= 9999 ? :
337 0 24 &looks_like_number($hdr->{'p2c'}) ? :
366 18 150 if ($alg eq 'dir') { }
22 128 elsif ($alg =~ /^A(128|192|256)KW$/) { }
22 106 elsif ($alg =~ /^A(128|192|256)GCMKW$/) { }
39 67 elsif ($alg =~ /^PBES2-HS(512|384|256)\+A(128|192|256)KW$/) { }
35 32 elsif ($alg =~ /^RSA(-OAEP|-OAEP-256|1_5)$/) { }
22 10 elsif ($alg =~ /^ECDH-ES\+A(128|192|256)KW$/) { }
10 0 elsif ($alg eq 'ECDH-ES') { }
395 0 115 defined $b64u_aad ? :
396 61 54 if ($enc =~ /^A(128|192|256)GCM$/) { }
54 0 elsif ($enc =~ /^A(128|192|256)CBC-HS(256|384|512)$/) { }
400 0 61 unless $len1 == $len2
411 0 54 unless $key_len == $size
427 89 79 if ($enc =~ /^A(128|192|256)GCM$/) { }
79 0 elsif ($enc =~ /^A(128|192|256)CBC-HS(256|384|512)$/) { }
431 0 89 unless $len1 == $len2
440 0 79 unless $key_len == $size
446 0 79 unless $sig eq $tag
459 2 113 $args{'extra_headers'} ? :
460 0 115 unless defined $enc
461 0 115 unless defined $payload
463 7 108 if ref $payload eq 'HASH'
467 2 113 if $args{'zip'}
472 0 115 unless $args{'key'}
473 0 115 defined $args{'keypass'} ? :
479 0 115 defined $args{'aad'} ? :
498 0 174 if $b64u_header and not $header
499 0 174 if $b64u_ecek and not $ecek
500 0 174 if $b64u_ct and not $ct
501 0 174 if $b64u_iv and not $iv
502 0 174 if $b64u_tag and not $tag
505 172 2 if (exists $args{'key'}) { }
2 0 elsif (exists $args{'kid_keys'}) { }
506 0 172 defined $args{'keypass'} ? :
512 0 2 unless defined $k
515 0 174 unless defined $key
518 1 173 if (ref $aa eq 'Regexp') { }
5 168 elsif ($aa and ref $aa eq 'ARRAY' || !ref($aa)) { }
519 1 0 unless $header->{'alg'} =~ /$aa/
522 2 3 ref $aa ? :
523 2 3 unless $acca{$header->{'alg'}}
527 1 170 if (ref $ae eq 'Regexp') { }
5 165 elsif ($ae and ref $ae eq 'ARRAY' || !ref($ae)) { }
528 1 0 unless $header->{'enc'} =~ /$ae/
531 2 3 ref $ae ? :
532 2 3 unless $acce{$header->{'enc'}}
537 0 168 defined $b64u_aad ? :
539 10 158 if $header->{'zip'}
547 1 32 if $alg eq 'none'
550 19 13 if ($alg =~ /^HS(256|384|512)$/) { }
5 8 elsif ($alg =~ /^RS(256|384|512)/) { }
3 5 elsif ($alg =~ /^PS(256|384|512)/) { }
4 1 elsif ($alg =~ /^ES(256|256K|384|512)$/) { }
1 0 elsif ($alg eq 'EdDSA') { }
579 0 98 if $b64u_sig and not $sig
582 0 98 if ($alg eq 'none') { }
62 36 elsif ($alg =~ /^HS(256|384|512)$/) { }
20 16 elsif ($alg =~ /^RS(256|384|512)/) { }
6 10 elsif ($alg =~ /^PS(256|384|512)/) { }
9 1 elsif ($alg =~ /^ES(256|256K|384|512)$/) { }
1 0 elsif ($alg eq 'EdDSA') { }
587 62 0 if $sig eq hmac("SHA$1", $key, $data)
592 19 0 if $pk->verify_message($sig, $data, $hash, 'v1.5')
598 6 0 if $pk->verify_message($sig, $data, $hash, 'pss', $hashlen)
603 8 0 if $pk->verify_message_rfc7518($sig, $data, $hash)
607 1 0 if $pk->verify_message($sig, $data)
616 2 32 $args{'extra_headers'} ? :
617 0 34 unless defined $payload
618 1 33 if $alg eq 'none' and not $args{'allow_none'}
620 12 21 if ref $payload eq 'HASH'
624 2 31 if $args{'zip'}
633 0 33 if not $args{'key'} and $alg ne 'none'
634 0 33 defined $args{'keypass'} ? :
643 0 105 if $b64u_header and not $header
644 1 104 if ref $unprotected_header ne 'HASH'
646 104 1 unless ($args{'ignore_signature'})
648 0 104 unless $alg
649 1 103 if $alg eq 'none' and not $args{'allow_none'}
650 0 2 if $alg eq 'none' and defined $b64u_sig and length $b64u_sig > 0
653 1 102 if (ref $aa eq 'Regexp') { }
2 100 elsif (ref $aa eq 'ARRAY') { }
3 97 elsif (defined $aa) { }
654 1 0 unless $alg =~ /$aa/
658 1 1 unless $acca{$alg}
661 1 2 if $aa ne $alg
664 98 2 if ($alg ne 'none')
666 95 3 if (exists $args{'key'}) { }
2 1 elsif (exists $args{'kid_keys'}) { }
1 0 elsif ($args{'key_from_jwk_header'}) { }
667 0 95 defined $args{'keypass'} ? :
672 2 0 exists $header->{'kid'} ? :
674 0 2 unless defined $k
682 0 1 if not defined $k or ref $k ne 'HASH' or not defined $k->{'kty'}
683 0 1 unless $alg =~ /^(RS|PS|ES)/ and $k->{'kty'} =~ /^(RSA|EC)$/
684 0 1 if $k->{'d'} or $k->{'p'} or $k->{'q'} or $k->{'dp'} or $k->{'dq'} or $k->{'qi'}
687 0 98 unless defined $key
690 0 96 unless $valid
694 0 99 if $b64u_payload and not $payload
695 5 94 if $header->{'zip'}
705 0 149 unless $args{'alg'}
707 34 115 if ($args{'alg'} =~ /^(none|EdDSA|(HS|RS|PS)(256|384|512)|ES(256|256K|384|512))$/) { }
115 0 elsif ($args{'alg'} =~ /^(dir|A(128|192|256)KW|A(128|192|256)GCMKW|PBES2-(HS256\+A128KW|HS384\+A192KW|HS512\+A256KW)|RSA-OAEP|RSA-OAEP-256|RSA1_5|ECDH-ES\+A(128|192|256)KW|ECDH-ES)$/) { }
710 33 0 if ($ser eq 'compact') { }
0 0 elsif ($ser eq 'flattened') { }
711 0 33 if defined $args{'unprotected_headers'}
716 0 0 if ref $args{'unprotected_headers'} eq 'HASH'
726 115 0 if ($ser eq 'compact') { }
0 0 elsif ($ser eq 'flattened') { }
727 0 115 if defined $args{'aad'}
728 0 115 if defined $args{'unprotected_headers'}
729 0 115 if defined $args{'shared_unprotected_headers'}
741 0 0 if ref $args{'unprotected_headers'} eq 'HASH'
743 0 0 if ref $args{'shared_unprotected_headers'} eq 'HASH'
745 0 0 if defined $b64u_aad
761 0 279 if (not $args{'token'}) { }
173 106 elsif ($args{'token'} =~ /^([a-zA-Z0-9_-]+)=*\.([a-zA-Z0-9_-]*)=*\.([a-zA-Z0-9_-]+)=*\.([a-zA-Z0-9_-]+)=*\.([a-zA-Z0-9_-]+)=*$/) { }
103 3 elsif ($args{'token'} =~ /^([a-zA-Z0-9_-]+)=*\.([a-zA-Z0-9_-]+)=*\.([a-zA-Z0-9_-]*)=*$/) { }
3 0 elsif ($args{'token'} =~ /^\s*\{.*?\}\s*$/s) { }
774 2 1 if (defined $hash->{'payload'} and $hash->{'protected'}) { }
1 0 elsif ($hash->{'ciphertext'} and $hash->{'protected'}) { }
789 8 228 if $args{'decode_header'}