rocket-webhook 0.1.0-alpha.2

Webhook validation for Rocket applications
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

/// ECDSA P256 Algorithm
#[cfg(feature = "p256")]
pub mod p256 {
    use p256::ecdsa::{Signature, VerifyingKey, signature::Verifier};
    use tokio_util::bytes::Bytes;

    use super::super::WebhookPublicKeyAlgorithm;

    pub struct EcdsaP256Asn1;
    impl WebhookPublicKeyAlgorithm for EcdsaP256Asn1 {
        fn verify(public_key: &Bytes, message: &[u8], signature: &[u8]) -> Result<(), String> {
            let key = VerifyingKey::from_sec1_bytes(&public_key)
                .map_err(|e| format!("Public key is invalid: {e}"))?;
            let signature = Signature::from_der(signature)
                .map_err(|e| format!("Expected signature is invalid: {e}"))?;
            key.verify(message, &signature)
                .map_err(|e| format!("ECDSA P-256 verification failed: {e}"))
        }
    }
}

/// ED25519 Algorithm
#[cfg(feature = "ed25519")]
pub mod ed25519 {
    use ed25519_dalek::{Signature, Verifier, VerifyingKey};
    use tokio_util::bytes::Bytes;

    use super::super::WebhookPublicKeyAlgorithm;

    pub struct Ed25519;
    impl WebhookPublicKeyAlgorithm for Ed25519 {
        fn verify(public_key: &Bytes, message: &[u8], signature: &[u8]) -> Result<(), String> {
            let key = VerifyingKey::try_from(public_key.as_ref())
                .map_err(|e| format!("Public key is invalid: {e}"))?;
            let signature = Signature::from_slice(signature)
                .map_err(|e| format!("Expected signature is invalid: {e}"))?;
            key.verify(message, &signature)
                .map_err(|e| format!("Ed25519 verification failed: {e}"))
        }
    }
}