106 lines
2.5 KiB
C++
106 lines
2.5 KiB
C++
/* -*- Mode: C++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4; fill-column: 100 -*- */
|
|
/*
|
|
* Copyright the Collabora Online contributors.
|
|
*
|
|
* SPDX-License-Identifier: MPL-2.0
|
|
*
|
|
* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
*/
|
|
|
|
// Authentication and Authorization support.
|
|
|
|
#pragma once
|
|
|
|
#include <string>
|
|
#include <memory>
|
|
|
|
#if !MOBILEAPP
|
|
#include <Poco/Crypto/RSADigestEngine.h>
|
|
#include <Poco/Crypto/RSAKey.h>
|
|
#endif
|
|
|
|
/// Base class of all Authentication/Authorization implementations.
|
|
class AuthBase
|
|
{
|
|
public:
|
|
virtual ~AuthBase() {}
|
|
/// Called to acquire an access token.
|
|
virtual const std::string getAccessToken() = 0;
|
|
|
|
/// Used to verify the validity of an access token.
|
|
virtual bool verify(const std::string& token) = 0;
|
|
};
|
|
|
|
#if !MOBILEAPP
|
|
|
|
/// JWT Authorization.
|
|
class JWTAuth : public AuthBase
|
|
{
|
|
public:
|
|
JWTAuth(const std::string& name, const std::string& sub, const std::string& aud)
|
|
: _name(name),
|
|
_sub(sub),
|
|
_aud(aud),
|
|
_digestEngine(*_key, "SHA256")
|
|
{
|
|
}
|
|
|
|
const std::string getAccessToken() override;
|
|
|
|
bool verify(const std::string& accessToken) override;
|
|
|
|
static void cleanup();
|
|
|
|
private:
|
|
const std::string createHeader();
|
|
|
|
const std::string createPayload();
|
|
|
|
private:
|
|
const std::string _alg = "RS256";
|
|
const std::string _typ = "JWT";
|
|
|
|
const std::string _iss = "cool";
|
|
const std::string _name;
|
|
const std::string _sub;
|
|
const std::string _aud;
|
|
|
|
static std::unique_ptr<Poco::Crypto::RSAKey> _key;
|
|
Poco::Crypto::RSADigestEngine _digestEngine;
|
|
};
|
|
|
|
/// OAuth Authorization.
|
|
class OAuth : public AuthBase
|
|
{
|
|
public:
|
|
OAuth(const std::string& clientId,
|
|
const std::string& clientSecret,
|
|
const std::string& tokenEndPoint,
|
|
const std::string& authVerifyUrl,
|
|
const std::string& authorizationCode) :
|
|
_clientId(clientId),
|
|
_clientSecret(clientSecret),
|
|
_tokenEndPoint(tokenEndPoint),
|
|
_authVerifyUrl(authVerifyUrl),
|
|
_authorizationCode(authorizationCode)
|
|
{
|
|
}
|
|
|
|
const std::string getAccessToken() override;
|
|
|
|
bool verify(const std::string& token) override;
|
|
|
|
private:
|
|
const std::string _clientId;
|
|
const std::string _clientSecret;
|
|
const std::string _tokenEndPoint;
|
|
const std::string _authVerifyUrl;
|
|
const std::string _authorizationCode;
|
|
};
|
|
|
|
#endif
|
|
|
|
/* vim:set shiftwidth=4 softtabstop=4 expandtab: */
|