33f8df7eb2
This change updates to go-jose v4, which was a new major release. jose.ParseSigned now expects the supported signing algorithms to be passed, on which we previously did our own check. As they use a dedicated type for this, the slice of string needs to be converted. The returned error also need to be handled in a non-standard way in order to stay compatible. For OIDC v4 we should use the jose.SignatureAlgorithm type directly and wrap errors, instead of returned static defined errors. Closes #583
46 lines
1 KiB
Go
46 lines
1 KiB
Go
package op
|
|
|
|
import (
|
|
"context"
|
|
"net/http"
|
|
|
|
jose "github.com/go-jose/go-jose/v4"
|
|
|
|
httphelper "github.com/zitadel/oidc/v3/pkg/http"
|
|
)
|
|
|
|
type KeyProvider interface {
|
|
KeySet(context.Context) ([]Key, error)
|
|
}
|
|
|
|
func keysHandler(k KeyProvider) func(http.ResponseWriter, *http.Request) {
|
|
return func(w http.ResponseWriter, r *http.Request) {
|
|
Keys(w, r, k)
|
|
}
|
|
}
|
|
|
|
func Keys(w http.ResponseWriter, r *http.Request, k KeyProvider) {
|
|
ctx, span := tracer.Start(r.Context(), "Keys")
|
|
r = r.WithContext(ctx)
|
|
defer span.End()
|
|
|
|
keySet, err := k.KeySet(r.Context())
|
|
if err != nil {
|
|
httphelper.MarshalJSONWithStatus(w, err, http.StatusInternalServerError)
|
|
return
|
|
}
|
|
httphelper.MarshalJSON(w, jsonWebKeySet(keySet))
|
|
}
|
|
|
|
func jsonWebKeySet(keys []Key) *jose.JSONWebKeySet {
|
|
webKeys := make([]jose.JSONWebKey, len(keys))
|
|
for i, key := range keys {
|
|
webKeys[i] = jose.JSONWebKey{
|
|
KeyID: key.ID(),
|
|
Algorithm: string(key.Algorithm()),
|
|
Use: key.Use(),
|
|
Key: key.Key(),
|
|
}
|
|
}
|
|
return &jose.JSONWebKeySet{Keys: webKeys}
|
|
}
|