forked from TrueCloudLab/frostfs-api-go
dfc2dd8a78
In previous implementation PToken contained the full Token structure. Since private token is used for data signature only, storing unused fields of a user token is impractical. To emphasize the purpose of the private part of the session, it makes sense to provide the user of the session package with its interface. The interface will only provide the functionality of data signing with private session key. This commit: * removes PToken structure from session package; * defines PrivateToken interface of private session part; * adds the implementation of PrivateToken on unexported struct; * provides the constructor that generates session key internally.
37 lines
796 B
Go
37 lines
796 B
Go
package session
|
|
|
|
import (
|
|
"crypto/ecdsa"
|
|
"crypto/rand"
|
|
|
|
crypto "github.com/nspcc-dev/neofs-crypto"
|
|
)
|
|
|
|
type pToken struct {
|
|
// private session token
|
|
sessionKey *ecdsa.PrivateKey
|
|
}
|
|
|
|
// NewSessionPrivateToken creates PrivateToken instance.
|
|
//
|
|
// Returns non-nil error on key generation error.
|
|
func NewPrivateToken() (PrivateToken, error) {
|
|
sk, err := ecdsa.GenerateKey(defaultCurve(), rand.Reader)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return &pToken{
|
|
sessionKey: sk,
|
|
}, nil
|
|
}
|
|
|
|
// Sign signs data with session private key.
|
|
func (t *pToken) Sign(data []byte) ([]byte, error) {
|
|
return crypto.Sign(t.sessionKey, data)
|
|
}
|
|
|
|
// PublicKey returns a binary representation of the session public key.
|
|
func (t *pToken) PublicKey() []byte {
|
|
return crypto.MarshalPublicKey(&t.sessionKey.PublicKey)
|
|
}
|