sofie-auth 0.3.0

Signing and sealing: session cookies, signed links and tokens.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

//! Signing and sealing: sessions sealed into a cookie with no server store, signed links and tokens.

mod bearer;
mod digest;
mod principal_token;
mod session;
mod signing;

pub use bearer::BearerToken;
pub use digest::digest;
pub use principal_token::{Acting, TokenRefused};
pub use session::{OLD_SIGNING_KEYS, OpenError, SIGNING_KEYS, SessionClaims, SigningKeys};
pub use signing::Signed;

use ring::rand::{SecureRandom, SystemRandom};
use sofie_core::{Error, Result};

fn random_bytes<const N: usize>(purpose: &str) -> Result<[u8; N]> {
    let mut bytes = [0; N];
    SystemRandom::new().fill(&mut bytes).map_err(|_| {
        Error::internal_message(format!("the system gave no random bytes for {purpose}"))
    })?;
    Ok(bytes)
}