com.gu.memsub.auth.common.S3PrivateKeyService.scala Maven / Gradle / Ivy

Go to download
package com.gu.memsub.auth.common

import java.security.PrivateKey

import com.amazonaws.auth.AWSCredentialsProvider
import com.amazonaws.regions.Region
import com.amazonaws.regions.Regions.EU_WEST_1
import com.amazonaws.services.s3.AmazonS3Client
import com.amazonaws.services.s3.model.{GetObjectRequest, S3ObjectId}
import com.google.api.client.util.SecurityUtils.{getPkcs12KeyStore => Pkcs12KeyStore, loadPrivateKeyFromKeyStore}
import com.gu.memsub.auth.common.KeystoreCredentials.GoogleIssuedDefaults


class S3PrivateKeyService(credentialsProvider: AWSCredentialsProvider) {

  val s3Client: AmazonS3Client = {
    val c = new AmazonS3Client(credentialsProvider)
    c.setRegion(Region getRegion EU_WEST_1)
    c
  }

  def loadPrivateKey(s3ObjectId: S3ObjectId, keyCreds: KeystoreCredentials = GoogleIssuedDefaults): PrivateKey = loadPrivateKeyFromKeyStore(
    Pkcs12KeyStore,
    s3Client.getObject(new GetObjectRequest(s3ObjectId)).getObjectContent,
    keyCreds.storePass,
    keyCreds.alias,
    keyCreds.keyPass
  )
}