test: expand Jwt test suite to production-level coverage

[Marius Storhaug (MariusStorhaug)]

Summary

Targets feat/13-implement-jwt-module and adds production-level edge-case coverage to the JWT v2 integration suite. While adding tests, it also fixes a regression where New-JwtSigningKey -Algorithm HS* returned [object[]] instead of [byte[]], breaking New-Jwt -GenerateKey for HMAC algorithms.

What changed

Tests (tests/Integration.Jwt.Tests.ps1)

Added a new Production-level edge cases context covering:

• Test-Jwt -Detailed reports failed signature and failed claim checks.
• New-Jwt -GenerateKey produces valid tokens for HS256, RS256, and ES256.
• ConvertFrom-Jwt accepts a SecureString token.
• Test-Jwt returns $false for an empty signature segment on signed algorithms.
• New-Jwt parameter validation rejects non-hashtable payloads.
• Test-Jwt parameter validation rejects $null tokens.
• Verbose output does not leak payload secrets or key material.

Bug fix (src/functions/public/Keys/New-JwtSigningKey.ps1)

PowerShell unwraps [byte[]] to [object[]] when returned through an untyped variable. The HS* branch now returns ,$bytes so the byte-array type is preserved, allowing New-Jwt -Algorithm HS256 -GenerateKey to sign and verify correctly.

CI

Bumped the reusable workflow pin to Process-PSModule v6.1.15 while preserving the explicit TestData mapping required by the reusable workflow's secrets interface.

Verification

Import-Module Pester -RequiredVersion 6.0.1 -Force
$config = New-PesterConfiguration
$config.Run.Path = 'tests'
Invoke-Pester -Configuration $config

Result: 123 passed, 0 failed (1 skipped: optional Azure Key Vault test).

Related

Contributes to #26 (JWT v2 overhaul).

---

Co-authored-by: Copilot App 223556219+Copilot@users.noreply.github.com

[github-actions]

No Significant Changes Detected

This PR does not contain changes to files that would trigger a new release:

Pattern	Description
^src/	Matches files where path matches this pattern
^README\.md$	Matches files where path matches this pattern

Build, test, and publish stages will be skipped for this PR.

If you believe this is incorrect, please verify that your changes are in the correct locations.

[github-actions]

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
MARKDOWN	Pass ✅
NATURAL_LANGUAGE	Pass ✅
POWERSHELL	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

[github-actions]

No Significant Changes Detected

This PR does not contain changes to files that would trigger a new release:

Pattern	Description
^src/	Matches files where path matches this pattern
^README\.md$	Matches files where path matches this pattern

Build, test, and publish stages will be skipped for this PR.

If you believe this is incorrect, please verify that your changes are in the correct locations.

[github-actions]

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
MARKDOWN	Pass ✅
NATURAL_LANGUAGE	Pass ✅
POWERSHELL	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter