Better validate that both alg and enc are presentconformance

JOSE headers must include the "alg" and "enc" options in order to be
able to actually process and encrypted token.
Return appropriate messages if either is missing.

1 files changed, 12 insertions, 0 deletions

diff --git a/jwcrypto/tests.py b/jwcrypto/tests.py
index 40fbbbc..cff4f95 100644
--- a/jwcrypto/tests.py
+++ b/jwcrypto/tests.py
@@ -654,6 +654,18 @@ class ConformanceTests(unittest.TestCase):
         enc.add_recipient(jwk.JWK(kty='oct', k=base64url_encode('A'*16)),
                           '{"alg":"A128KW","enc":"A128GCM"}')
 
+    def test_jwe_no_alg_in_jose_headers(self):
+        enc = jwe.JWE(plaintext='plain')
+        self.assertRaises(jwe.InvalidJWEData, enc.add_recipient,
+                          jwk.JWK(kty='oct', k=base64url_encode('A'*16)),
+                          '{"enc":"A128GCM"}')
+
+    def test_jwe_no_enc_in_jose_headers(self):
+        enc = jwe.JWE(plaintext='plain')
+        self.assertRaises(jwe.InvalidJWEData, enc.add_recipient,
+                          jwk.JWK(kty='oct', k=base64url_encode('A'*16)),
+                          '{"alg":"A128KW"}')
+
     def test_aes_128(self):
         enc = jwe.JWE(plaintext='plain')
         key128 = jwk.JWK(kty='oct', k=base64url_encode('A' * (128 / 8)))