OAuth2 / JWT / OpenID Connect for mocking auth... which isn't that different from doing it for real, actually.
https://mock.pocketid.app
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
70 lines
1.4 KiB
70 lines
1.4 KiB
package api
|
|
|
|
import (
|
|
"bytes"
|
|
"crypto/sha256"
|
|
"encoding/binary"
|
|
"encoding/json"
|
|
"errors"
|
|
"io"
|
|
"log"
|
|
"math/rand"
|
|
mathrand "math/rand"
|
|
"net/http"
|
|
|
|
"git.coolaj86.com/coolaj86/go-mockid/xkeypairs"
|
|
)
|
|
|
|
/*
|
|
func getJWS(r *http.Request) (*xkeypairs.KeyOptions, error) {
|
|
|
|
}
|
|
*/
|
|
|
|
func getOpts(r *http.Request) (*xkeypairs.KeyOptions, error) {
|
|
tok := make(map[string]interface{})
|
|
decoder := json.NewDecoder(r.Body)
|
|
err := decoder.Decode(&tok)
|
|
if nil != err && io.EOF != err {
|
|
log.Printf("json decode error: %s", err)
|
|
return nil, errors.New("Bad Request: invalid json body")
|
|
}
|
|
defer r.Body.Close()
|
|
|
|
var seed int64
|
|
seedStr, _ := tok["seed"].(string)
|
|
if "" != seedStr {
|
|
if len(seedStr) > 256 {
|
|
return nil, errors.New("Bad Request: base64 seed should be <256 characters (and is truncated to 64-bits anyway)")
|
|
}
|
|
b := sha256.Sum256([]byte(seedStr))
|
|
seed, _ = binary.ReadVarint(bytes.NewReader(b[0:8]))
|
|
}
|
|
|
|
key, _ := tok["key"].(string)
|
|
opts := &xkeypairs.KeyOptions{
|
|
Seed: seed,
|
|
Key: key,
|
|
}
|
|
|
|
opts.Claims, _ = tok["claims"].(xkeypairs.Object)
|
|
opts.Header, _ = tok["header"].(xkeypairs.Object)
|
|
|
|
var n int
|
|
if 0 != seed {
|
|
n = opts.MyFooNextReader().(*mathrand.Rand).Intn(2)
|
|
} else {
|
|
n = rand.Intn(2)
|
|
}
|
|
|
|
opts.KeyType, _ = tok["kty"].(string)
|
|
if "" == opts.KeyType {
|
|
if 0 == n {
|
|
opts.KeyType = "RSA"
|
|
} else {
|
|
opts.KeyType = "EC"
|
|
}
|
|
}
|
|
|
|
return opts, nil
|
|
}
|
|
|