huskarl-core 0.6.4

Base library for huskarl (OAuth2 client) ecosystem.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48

use crate::crypto::signer::{
    AsymmetricJwsSigner, AsymmetricJwsSignerSelector, BoxedAsymmetricJwsSigner, JwsSignerSelector,
};

/// A multi-key asymmetric signer selector that supports key selection by JWK thumbprint.
///
/// This is useful for `DPoP` scenarios where a client is bound to multiple keys and
/// the server specifies which one to use via `dpop_jkt`.
///
/// - [`select_signer`](JwsSignerSelector::select_signer) always returns the `default` signer.
/// - [`select_signer_by_thumbprint`](AsymmetricJwsSignerSelector::select_signer_by_thumbprint)
///   searches the default signer first, then the additional signers.
#[derive(Debug, Clone)]
pub struct MultiKeySigner<S: AsymmetricJwsSigner = BoxedAsymmetricJwsSigner> {
    default: S,
    additional: Vec<S>,
}

impl<S: AsymmetricJwsSigner> MultiKeySigner<S> {
    /// Creates a new `MultiKeySigner` with a default signer and additional signers.
    #[must_use]
    pub fn new(default: S, additional: Vec<S>) -> Self {
        Self {
            default,
            additional,
        }
    }
}

impl<S: AsymmetricJwsSigner> JwsSignerSelector for MultiKeySigner<S> {
    type Signer = S;

    fn select_signer(&self) -> S {
        self.default.clone()
    }
}

impl<S: AsymmetricJwsSigner> AsymmetricJwsSignerSelector for MultiKeySigner<S> {
    fn select_signer_by_thumbprint(&self, thumbprint: &str) -> Option<S> {
        let all = std::iter::once(&self.default).chain(self.additional.iter());
        for signer in all {
            if signer.public_key_jwk().thumbprint() == thumbprint {
                return Some(signer.clone());
            }
        }
        None
    }
}