security

Documentation

Overview

* * Copyright 2021 Comcast Cable Communications Management, LLC * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * SPDX-License-Identifier: Apache-2.0

* * Copyright 2021 Comcast Cable Communications Management, LLC * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * SPDX-License-Identifier: Apache-2.0

* * Copyright 2021 Comcast Cable Communications Management, LLC * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * * SPDX-License-Identifier: Apache-2.0

Index

• Constants
• func GenerateKeyPairAsFiles(privateKeyFileName string, publicKeyFileName string) (*rsa.PrivateKey, error)
• func PaddingB64(input string) string
• func ParseKidFromTokenHeader(tokenString string) (string, error)
• func VerifyBySermo(decodeKeys map[string]*rsa.PublicKey, validKids []string, ...) (bool, error)
• type ThemisClaims
• type TokenManager
  • func NewTokenManager(conf *configuration.Config) *TokenManager
  • func (m *TokenManager) Generate(mac string, ttl int64) string
  • func (m *TokenManager) SetVerifyFunc(fn VerifyFunc)
  • func (m *TokenManager) VerifyApiToken(token string) (bool, error)
  • func (m *TokenManager) VerifyCpeToken(token string, mac string) (bool, error)
• type VerifyFunc

Constants

const (
	EncodingKeyId = "webconfig_key"
	// sermo lib
	JwtLibIdDefault = 2
)

Functions

func GenerateKeyPairAsFiles

func GenerateKeyPairAsFiles(privateKeyFileName string, publicKeyFileName string) (*rsa.PrivateKey, error)

func PaddingB64

func PaddingB64(input string) string

func ParseKidFromTokenHeader

func ParseKidFromTokenHeader(tokenString string) (string, error)

func VerifyBySermo

func VerifyBySermo(decodeKeys map[string]*rsa.PublicKey, validKids []string, requiredCapabilities []string, vargs ...string) (bool, error)

Types

type ThemisClaims

type ThemisClaims struct {
	KeyId        string   `json:"kid"`
	Mac          string   `json:"mac"`
	PartnerId    string   `json:"partner-id"`
	Serial       string   `json:"serial"`
	Trust        string   `json:"trust"`
	Uuid         string   `json:"uuid"`
	Capabilities []string `json:"capabilities"`
	jwt.StandardClaims
}

type TokenManager

type TokenManager struct {
	// contains filtered or unexported fields
}

func NewTokenManager

func NewTokenManager(conf *configuration.Config) *TokenManager

func (*TokenManager) Generate

func (m *TokenManager) Generate(mac string, ttl int64) string

func (*TokenManager) SetVerifyFunc

func (m *TokenManager) SetVerifyFunc(fn VerifyFunc)

func (*TokenManager) VerifyApiToken

func (m *TokenManager) VerifyApiToken(token string) (bool, error)

func (*TokenManager) VerifyCpeToken

func (m *TokenManager) VerifyCpeToken(token string, mac string) (bool, error)

type VerifyFunc

type VerifyFunc func(map[string]*rsa.PublicKey, []string, []string, ...string) (bool, error)