signer.go 1.9 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768
  1. package jws
  2. import (
  3. "github.com/lestrrat-go/jwx/jwa"
  4. "github.com/pkg/errors"
  5. )
  6. type SignerFactory interface {
  7. Create() (Signer, error)
  8. }
  9. type SignerFactoryFn func() (Signer, error)
  10. func (fn SignerFactoryFn) Create() (Signer, error) {
  11. return fn()
  12. }
  13. var signerDB map[jwa.SignatureAlgorithm]SignerFactory
  14. // RegisterSigner is used to register a factory object that creates
  15. // Signer objects based on the given algorithm.
  16. //
  17. // For example, if you would like to provide a custom signer for
  18. // jwa.EdDSA, use this function to register a `SignerFactory`
  19. // (probably in your `init()`)
  20. func RegisterSigner(alg jwa.SignatureAlgorithm, f SignerFactory) {
  21. signerDB[alg] = f
  22. }
  23. func init() {
  24. signerDB = make(map[jwa.SignatureAlgorithm]SignerFactory)
  25. for _, alg := range []jwa.SignatureAlgorithm{jwa.RS256, jwa.RS384, jwa.RS512, jwa.PS256, jwa.PS384, jwa.PS512} {
  26. RegisterSigner(alg, func(alg jwa.SignatureAlgorithm) SignerFactory {
  27. return SignerFactoryFn(func() (Signer, error) {
  28. return newRSASigner(alg), nil
  29. })
  30. }(alg))
  31. }
  32. for _, alg := range []jwa.SignatureAlgorithm{jwa.ES256, jwa.ES384, jwa.ES512, jwa.ES256K} {
  33. RegisterSigner(alg, func(alg jwa.SignatureAlgorithm) SignerFactory {
  34. return SignerFactoryFn(func() (Signer, error) {
  35. return newECDSASigner(alg), nil
  36. })
  37. }(alg))
  38. }
  39. for _, alg := range []jwa.SignatureAlgorithm{jwa.HS256, jwa.HS384, jwa.HS512} {
  40. RegisterSigner(alg, func(alg jwa.SignatureAlgorithm) SignerFactory {
  41. return SignerFactoryFn(func() (Signer, error) {
  42. return newHMACSigner(alg), nil
  43. })
  44. }(alg))
  45. }
  46. RegisterSigner(jwa.EdDSA, SignerFactoryFn(func() (Signer, error) {
  47. return newEdDSASigner(), nil
  48. }))
  49. }
  50. // NewSigner creates a signer that signs payloads using the given signature algorithm.
  51. func NewSigner(alg jwa.SignatureAlgorithm) (Signer, error) {
  52. f, ok := signerDB[alg]
  53. if ok {
  54. return f.Create()
  55. }
  56. return nil, errors.Errorf(`unsupported signature algorithm "%s"`, alg)
  57. }