aauth 0.0.2

Rust implementation of the AAuth authorization protocol
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100

use std::sync::Arc;

use async_trait::async_trait;
use jsonwebtoken::{Algorithm, Header, encode};
use uuid::Uuid;

use crate::error::Result;
use crate::jwt::{AgentClaims, CnfClaim};
use crate::keys::TestKeys;
use crate::types::{JwtTyp, KeyMaterial, SignatureKey, SignatureKeyJwt};

#[async_trait]
pub trait KeyMaterialProvider: Send + Sync {
    async fn key_material(&self) -> Result<KeyMaterial>;
}

pub trait AgentJwtMinter: Send + Sync {
    fn mint_agent_jwt(&self, agent_url: &str, sub: &str, ps: Option<&str>) -> String;
}

#[derive(Clone)]
pub struct TestAgentJwtMinter {
    keys: TestKeys,
}

impl TestAgentJwtMinter {
    pub fn new(keys: TestKeys) -> Self {
        Self { keys }
    }
}

impl AgentJwtMinter for TestAgentJwtMinter {
    fn mint_agent_jwt(&self, agent_url: &str, sub: &str, ps: Option<&str>) -> String {
        let now = std::time::SystemTime::now()
            .duration_since(std::time::UNIX_EPOCH)
            .unwrap()
            .as_secs() as i64;

        let claims = AgentClaims {
            iss: agent_url.into(),
            dwk: "aauth-agent.json".into(),
            sub: sub.into(),
            jti: Uuid::new_v4().to_string(),
            cnf: CnfClaim {
                jwk: self.keys.agent_ephemeral.public_jwk(),
            },
            iat: now,
            exp: now + 3600,
            ps: ps.map(str::to_string),
        };

        let mut header = Header::new(Algorithm::EdDSA);
        header.typ = Some(JwtTyp::Agent.as_str().into());
        header.kid = self.keys.agent_root.kid().map(str::to_string);

        encode(&header, &claims, &self.keys.agent_root.encoding_key()).expect("sign agent jwt")
    }
}

impl TestKeys {
    pub fn agent_jwt_minter(&self) -> TestAgentJwtMinter {
        TestAgentJwtMinter::new(self.clone())
    }
}

pub struct StaticKeyMaterialProvider {
    material: KeyMaterial,
}

impl StaticKeyMaterialProvider {
    pub fn from_test_keys(keys: &TestKeys, agent_jwt: impl Into<String>) -> Self {
        Self {
            material: KeyMaterial {
                signing_jwk: keys.agent_ephemeral.signing_jwk(),
                signature_key: SignatureKey::Jwt(SignatureKeyJwt {
                    jwt: agent_jwt.into(),
                }),
            },
        }
    }

    pub fn into_arc(self) -> Arc<dyn KeyMaterialProvider> {
        Arc::new(self)
    }
}

#[async_trait]
impl KeyMaterialProvider for StaticKeyMaterialProvider {
    async fn key_material(&self) -> Result<KeyMaterial> {
        Ok(self.material.clone())
    }
}

pub fn mint_agent_jwt(keys: &TestKeys, agent_url: &str, sub: &str, ps: Option<&str>) -> String {
    keys.agent_jwt_minter().mint_agent_jwt(agent_url, sub, ps)
}

pub fn create_key_provider(keys: &TestKeys, agent_jwt: String) -> Arc<dyn KeyMaterialProvider> {
    StaticKeyMaterialProvider::from_test_keys(keys, agent_jwt).into_arc()
}