GO-2022-0381: Import of incorrectly embargoed keys could cause early publication in github.com/google/exposure-notifications-server

model

package

v0.6.0 Latest Latest Go to latest Published: Aug 31, 2020 License: Apache-2.0 Imports: 6 Imported by: 0

Documentation ¶

Package model is a model abstraction of health authorities.

This section is empty.

This section is empty.

This section is empty.

type HealthAuthority struct {
	ID       int64
	Issuer   string
	Audience string
	Name     string
	Keys     []*HealthAuthorityKey
}

HealthAuthority represents a public health authority that is authorized to issue diagnosis verification certificates accepted by this server.

func (ha *HealthAuthority) Validate() error

Validate returns an error if the HealthAuthority struct is not valid.

type HealthAuthorityKey struct {
	AuthorityID  int64
	Version      string
	From         time.Time
	Thru         time.Time
	PublicKeyPEM string
}

HealthAuthorityKey represents a public key version for a given health authority.

func (k *HealthAuthorityKey) FormattedFromTime() string

func (k *HealthAuthorityKey) FormattedThruTime() string

func (k *HealthAuthorityKey) FromHTMLDate() string

func (k *HealthAuthorityKey) FromHTMLTime() string

func (k *HealthAuthorityKey) IsFuture() bool

func (k *HealthAuthorityKey) IsValid() bool

IsValid returns true if the key is valid based on the current time.

func (k *HealthAuthorityKey) IsValidAt(t time.Time) bool

IsValidAt returns true if the key is valid at a specific point in time.

func (k *HealthAuthorityKey) PublicKey() (*ecdsa.PublicKey, error)

PublicKey decodes the PublicKeyPEM text and returns the `*ecdsa.PublicKey` This system only supports verifying ECDSA JWTs, `alg: ES256`.

func (k *HealthAuthorityKey) ThruHTMLDate() string

func (k *HealthAuthorityKey) ThruHTMLTime() string

func (k *HealthAuthorityKey) Validate() error

Validate returns an error if the HealthAuthorityKey is not valid.