utils.jwks.scala Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of otoroshi_2.12 Show documentation

Lightweight api management on top of a modern http reverse proxy

The newest version!

package otoroshi.utils.jwk

import java.security.interfaces.{ECPublicKey, RSAPublicKey}
import com.nimbusds.jose.jwk.{Curve, ECKey, RSAKey}
import otoroshi.env.Env
import otoroshi.utils.syntax.implicits._
import play.api.libs.json.{JsArray, JsValue, Json}
import play.api.mvc.RequestHeader

import java.security.PublicKey
import scala.concurrent.{ExecutionContext, Future}
import scala.util.{Failure, Try}

object JWKSHelper {

  def jwks(req: RequestHeader, certIds: Seq[String])(implicit
      ec: ExecutionContext,
      env: Env
  ): Future[Either[JsValue, JsValue]] = {
    if (req.method == "GET") {
      for {
        apikeys <- env.datastores.apiKeyDataStore.findAll()
        certs   <- env.datastores.certificatesDataStore.findAll()
      } yield {
        val ids          = apikeys.map(_.metadata.get("jwt-sign-keypair")).collect { case Some(value) => value } ++ certIds
        val exposedCerts = certs
          .filter(c => (c.exposed || ids.contains(c.id)) && c.notRevoked) // && c.notExpired)
          .filterNot(_.chain.trim.isEmpty)
          .filterNot(_.privateKey.trim.isEmpty)
          .flatMap(c =>
            Try((c.id, c.cryptoKeyPair.getPublic))
              .seffectOnWithPredicate(t => t.isFailure)(t =>
                t.asInstanceOf[Failure[Tuple2[String, PublicKey]]].exception.printStackTrace()
              )
              .toOption
          )
          .flatMap {
            case (id, pub: RSAPublicKey) => new RSAKey.Builder(pub).keyID(id).build().toJSONString.parseJson.some
            case (id, pub: ECPublicKey)  =>
              new ECKey.Builder(Curve.forECParameterSpec(pub.getParams), pub)
                .keyID(id)
                .build()
                .toJSONString
                .parseJson
                .some
            case _                       => None
          }
        Right(Json.obj("keys" -> JsArray(exposedCerts)))
      }
    } else {
      Left(Json.obj("error" -> "resource not found !")).future
    }
  }
}