aauth 0.0.1

Rust implementation of the AAuth authorization protocol
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47

use std::time::{SystemTime, UNIX_EPOCH};

use jsonwebtoken::{Algorithm, Header};

use crate::jwt::ResourceClaims;
use crate::server::keys::ResourceTokenSigner;
use crate::types::JwtTyp;

#[derive(Debug, Clone)]
pub struct ResourceTokenOptions {
    pub resource: String,
    pub auth_server: String,
    pub agent: String,
    pub agent_jkt: String,
    pub scope: Option<String>,
    pub mission: Option<crate::types::Mission>,
    pub lifetime: Option<u64>,
}

pub async fn create_resource_token(
    options: ResourceTokenOptions,
    signer: &dyn ResourceTokenSigner,
) -> Result<String, String> {
    let lifetime = options.lifetime.unwrap_or(300);
    let now = SystemTime::now()
        .duration_since(UNIX_EPOCH)
        .map_err(|e| e.to_string())?
        .as_secs();

    let claims = ResourceClaims {
        iss: options.resource,
        dwk: "aauth-resource.json".into(),
        aud: options.auth_server,
        jti: uuid::Uuid::new_v4().to_string(),
        agent: options.agent,
        agent_jkt: options.agent_jkt,
        iat: now,
        exp: now + lifetime,
        scope: options.scope,
        mission: options.mission,
    };

    let mut header = Header::new(Algorithm::EdDSA);
    header.typ = Some(JwtTyp::Resource.as_str().into());

    signer.sign_resource_token(header, claims).await
}