-
Notifications
You must be signed in to change notification settings - Fork 28
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #76 from ldclakmal/dev-design
Update ballerina/jwt module for Swan Lake Design
- Loading branch information
Showing
20 changed files
with
483 additions
and
614 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,81 @@ | ||
| // Copyright (c) 2019 WSO2 Inc. (http://www.wso2.org) All Rights Reserved. | ||
| // | ||
| // WSO2 Inc. licenses this file to you under the Apache License, | ||
| // Version 2.0 (the "License"); you may not use this file except | ||
| // in compliance with the License. | ||
| // You may obtain a copy of the License at | ||
| // | ||
| // http://www.apache.org/licenses/LICENSE-2.0 | ||
| // | ||
| // Unless required by applicable law or agreed to in writing, | ||
| // software distributed under the License is distributed on an | ||
| // "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY | ||
| // KIND, either express or implied. See the License for the | ||
| // specific language governing permissions and limitations | ||
| // under the License. | ||
|
|
||
| import ballerina/time; | ||
| import ballerina/uuid; | ||
|
|
||
| # Represents the client JWT Auth provider, which is used to authenticate with an external endpoint by generating | ||
| # a self signed JWT. | ||
| # ```ballerina | ||
| # jwt:ClientSelfSignedJwtAuthProvider provider = new({ | ||
| # issuer: "example", | ||
| # audience: ["ballerina"], | ||
| # keyStoreConfig: { | ||
| # keyAlias: "ballerina", | ||
| # keyPassword: "ballerina", | ||
| # keyStore: { | ||
| # path: "/path/to/keystore.p12", | ||
| # password: "ballerina" | ||
| # } | ||
| # } | ||
| # }); | ||
| # ``` | ||
| public class ClientSelfSignedJwtAuthProvider { | ||
|
|
||
| IssuerConfig issuerConfig; | ||
|
|
||
| # Provides authentication based on the provided JWT configuration. | ||
| # | ||
| # + issuerConfig - JWT issuer configurations | ||
| public isolated function init(IssuerConfig issuerConfig) { | ||
| self.issuerConfig = issuerConfig; | ||
| } | ||
|
|
||
| # Generates the JWT for authentication. | ||
| # ```ballerina | ||
| # string|auth:Error token = provider.generateToken(); | ||
| # ``` | ||
| # | ||
| # + return - Generated token or else an `auth:Error` if token can't be generated | ||
| public isolated function generateToken() returns string|Error { | ||
| string|Error result = prepareJwtAuthToken(self.issuerConfig); | ||
| if (result is Error) { | ||
| return prepareError("Failed to generate JWT.", result); | ||
| } | ||
| return <string>result; | ||
| } | ||
| } | ||
|
|
||
| isolated function prepareJwtAuthToken(IssuerConfig issuerConfig) returns string|Error { | ||
| Header header = { alg: issuerConfig.signingAlg, typ: "JWT" }; | ||
| Payload payload = { | ||
| sub: issuerConfig.username, | ||
| iss: issuerConfig.issuer, | ||
| exp: time:currentTime().time / 1000 + issuerConfig.expTimeInSeconds, | ||
| iat: time:currentTime().time / 1000, | ||
| nbf: time:currentTime().time / 1000, | ||
| jti: uuid:createType4AsString(), | ||
| aud: issuerConfig.audience | ||
| }; | ||
|
|
||
| map<json>? customClaims = issuerConfig?.customClaims; | ||
| if (customClaims is map<json>) { | ||
| payload.customClaims = customClaims; | ||
| } | ||
|
|
||
| // TODO: cache the token per-user per-client and reuse it | ||
| return issue(header, payload, issuerConfig.keyStoreConfig); | ||
| } |
This file was deleted.
Oops, something went wrong.
Oops, something went wrong.