cim/zitadel-oidc
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: make checkKey public

Browse source
This commit is contained in:
Livio Amstutz 2020-02-06 07:24:28 +01:00
parent 6d0890e280
commit 7e2c22f99b
2 changed files with 17 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

14
pkg/rp/jwks.go
View file

@ -74,7 +74,7 @@ func (r *remoteKeySet) VerifySignature(ctx context.Context, jws *jose.JSONWebSig
}
keys := r.keysFromCache()
payload, err, ok := checkKey(keyID, keys, jws)
payload, err, ok := CheckKey(keyID, keys, jws)
if ok {
return payload, err
}
@ -84,7 +84,7 @@ func (r *remoteKeySet) VerifySignature(ctx context.Context, jws *jose.JSONWebSig
return nil, fmt.Errorf("fetching keys %v", err)
}
payload, err, ok = checkKey(keyID, keys, jws)
payload, err, ok = CheckKey(keyID, keys, jws)
if !ok {
return nil, errors.New("invalid kid")
}
@ -154,13 +154,3 @@ func (r *remoteKeySet) fetchRemoteKeys(ctx context.Context) ([]jose.JSONWebKey,
return keySet.Keys, nil
}
func checkKey(keyID string, keys []jose.JSONWebKey, jws *jose.JSONWebSignature) ([]byte, error, bool) {
for _, key := range keys {
if keyID == "" || key.KeyID == keyID {
payload, err := jws.Verify(&key)
return payload, err, true
}
}
return nil, nil, false
}

15
pkg/rp/jws.go Normal file
View file

@ -0,0 +1,15 @@
package rp
import (
"gopkg.in/square/go-jose.v2"
)
func CheckKey(keyID string, keys []jose.JSONWebKey, jws *jose.JSONWebSignature) ([]byte, error, bool) {
for _, key := range keys {
if keyID == "" || key.KeyID == keyID {
payload, err := jws.Verify(&key)
return payload, err, true
}
}
return nil, nil, false
}