| 1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768 |
- package jws
- import (
- "github.com/lestrrat-go/jwx/jwa"
- "github.com/pkg/errors"
- )
- type SignerFactory interface {
- Create() (Signer, error)
- }
- type SignerFactoryFn func() (Signer, error)
- func (fn SignerFactoryFn) Create() (Signer, error) {
- return fn()
- }
- var signerDB map[jwa.SignatureAlgorithm]SignerFactory
- // RegisterSigner is used to register a factory object that creates
- // Signer objects based on the given algorithm.
- //
- // For example, if you would like to provide a custom signer for
- // jwa.EdDSA, use this function to register a `SignerFactory`
- // (probably in your `init()`)
- func RegisterSigner(alg jwa.SignatureAlgorithm, f SignerFactory) {
- signerDB[alg] = f
- }
- func init() {
- signerDB = make(map[jwa.SignatureAlgorithm]SignerFactory)
- for _, alg := range []jwa.SignatureAlgorithm{jwa.RS256, jwa.RS384, jwa.RS512, jwa.PS256, jwa.PS384, jwa.PS512} {
- RegisterSigner(alg, func(alg jwa.SignatureAlgorithm) SignerFactory {
- return SignerFactoryFn(func() (Signer, error) {
- return newRSASigner(alg), nil
- })
- }(alg))
- }
- for _, alg := range []jwa.SignatureAlgorithm{jwa.ES256, jwa.ES384, jwa.ES512, jwa.ES256K} {
- RegisterSigner(alg, func(alg jwa.SignatureAlgorithm) SignerFactory {
- return SignerFactoryFn(func() (Signer, error) {
- return newECDSASigner(alg), nil
- })
- }(alg))
- }
- for _, alg := range []jwa.SignatureAlgorithm{jwa.HS256, jwa.HS384, jwa.HS512} {
- RegisterSigner(alg, func(alg jwa.SignatureAlgorithm) SignerFactory {
- return SignerFactoryFn(func() (Signer, error) {
- return newHMACSigner(alg), nil
- })
- }(alg))
- }
- RegisterSigner(jwa.EdDSA, SignerFactoryFn(func() (Signer, error) {
- return newEdDSASigner(), nil
- }))
- }
- // NewSigner creates a signer that signs payloads using the given signature algorithm.
- func NewSigner(alg jwa.SignatureAlgorithm) (Signer, error) {
- f, ok := signerDB[alg]
- if ok {
- return f.Create()
- }
- return nil, errors.Errorf(`unsupported signature algorithm "%s"`, alg)
- }
|