Add audience test

Signed-off-by: Ryan Liang <jiallian@amazon.com>
opensearch-project · Oct 10, 2023 · eef1957 · eef1957
1 parent 4e24045
commit eef1957
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/src/test/java/org/opensearch/security/http/OnBehalfOfAuthenticatorTest.java b/src/test/java/org/opensearch/security/http/OnBehalfOfAuthenticatorTest.java
@@ -375,6 +375,19 @@ public void testWrongSubjectKey() throws Exception {
         Assert.assertNull(credentials);
     }
 
+    @Test
+    public void testMissingAudienceClaim() throws Exception {
+
+        final AuthCredentials credentials = extractCredentialsFromJwtHeader(
+            signingKeyB64Encoded,
+            claimsEncryptionKey,
+            Jwts.builder().setIssuer(clusterName).setSubject("Test User").claim("roles", "role1,role2"),
+            false
+        );
+
+        Assert.assertNull(credentials);
+    }
+
     @Test
     public void testExp() throws Exception {