95 lines
2.4 KiB
Go
95 lines
2.4 KiB
Go
package provisioner
|
|
|
|
import (
|
|
"encoding/json"
|
|
"strings"
|
|
|
|
"github.com/pkg/errors"
|
|
)
|
|
|
|
// Interface is the interface that all provisioner types must implement.
|
|
type Interface interface {
|
|
ID() string
|
|
GetEncryptedKey() (kid string, key string, ok bool)
|
|
Init(claims *Claims) error
|
|
Authorize(token string) ([]SignOption, error)
|
|
}
|
|
|
|
// Type indicates the provisioner Type.
|
|
type Type int
|
|
|
|
const (
|
|
// TypeJWK is used to indicate the JWK provisioners.
|
|
TypeJWK Type = 1
|
|
|
|
// TypeOIDC is used to indicate the OIDC provisioners.
|
|
TypeOIDC Type = 2
|
|
)
|
|
|
|
type provisioner struct {
|
|
Type string `json:"type"`
|
|
}
|
|
|
|
// Provisioner implmements the provisioner.Interface on a base provisioner. It
|
|
// also implements custom marshalers and unmarshalers so different provisioners
|
|
// can be represented in a configuration type.
|
|
type Provisioner struct {
|
|
typ Type
|
|
base Interface
|
|
}
|
|
|
|
// ID returns the base provisioner unique ID. This identifier is used as the key
|
|
// in a provisioner.Collection.
|
|
func (p *Provisioner) ID() string {
|
|
return p.base.ID()
|
|
}
|
|
|
|
// GetEncryptedKey returns the base provisioner encrypted key if it's defined.
|
|
func (p *Provisioner) GetEncryptedKey() (string, string, bool) {
|
|
return p.base.GetEncryptedKey()
|
|
}
|
|
|
|
// Type return the provisioners type.
|
|
func (p *Provisioner) Type() Type {
|
|
return p.typ
|
|
}
|
|
|
|
// Init initializes the base provisioner with the given claims.
|
|
func (p *Provisioner) Init(claims *Claims) error {
|
|
return p.base.Init(claims)
|
|
}
|
|
|
|
// Authorize validates the given token on the base provisioner returning a list
|
|
// of options to validate the signing request.
|
|
func (p *Provisioner) Authorize(token string) ([]SignOption, error) {
|
|
return p.base.Authorize(token)
|
|
}
|
|
|
|
// MarshalJSON implements the json.Marshaler interface on the Provisioner type.
|
|
func (p *Provisioner) MarshalJSON() ([]byte, error) {
|
|
return json.Marshal(p.base)
|
|
}
|
|
|
|
// UnmarshalJSON implements the json.Unmarshaler interface on the Provisioner
|
|
// type.
|
|
func (p *Provisioner) UnmarshalJSON(data []byte) error {
|
|
var typ provisioner
|
|
if err := json.Unmarshal(data, &typ); err != nil {
|
|
return errors.Errorf("error unmarshalling provisioner")
|
|
}
|
|
|
|
switch strings.ToLower(typ.Type) {
|
|
case "jwt":
|
|
p.typ = TypeJWK
|
|
p.base = &JWT{}
|
|
case "oidc":
|
|
p.typ = TypeOIDC
|
|
p.base = &OIDC{}
|
|
default:
|
|
return errors.New("provisioner type not supported")
|
|
}
|
|
if err := json.Unmarshal(data, &p.base); err != nil {
|
|
return errors.Errorf("error unmarshalling provisioner")
|
|
}
|
|
return nil
|
|
}
|