beckn/protocol-server

Testing of Shared key Authentication

em-abee opened this issue · 1 comments

Recently, Shared Key Authentication for the BPP webhook was released. Testing is required to validate the implementation. Below are the test cases:

  1. While sending a request to the BPP Webhook protocol server, it should not include an authorization header if HMAC settings are disabled in the config.
  2. The protocol server should include an authorization header with the signature as its value if HMAC settings are enabled.
  3. The BPP should receive an authorization header that contains the signature.
  4. The BPP should be able to verify the message using the shared key.
  5. Verification should fail on the BPP when the shared key is invalid.

Testing above scenarios on local and dev environment, results are as expected. Closing ticket