libreoffice-online/wsd/Auth.hpp
Michael Meeks 47b89b32ef spdx: improve machine and human readability of headers.
Change-Id: I1b6dcd2ec1fbef6556d70b8af3ccfd5d6a95c59a
Signed-off-by: Michael Meeks <michael.meeks@collabora.com>
2023-10-31 10:33:07 +00:00

102 lines
2.4 KiB
C++

/* -*- Mode: C++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4; fill-column: 100 -*- */
/*
* Copyright the Collabora Online contributors.
*
* SPDX-License-Identifier: MPL-2.0
*/
// Authentication and Authorization support.
#pragma once
#include <cassert>
#include <string>
#include <memory>
#if !MOBILEAPP
#include <Poco/Crypto/RSADigestEngine.h>
#include <Poco/Crypto/RSAKey.h>
#endif
/// Base class of all Authentication/Authorization implementations.
class AuthBase
{
public:
virtual ~AuthBase() {}
/// Called to acquire an access token.
virtual const std::string getAccessToken() = 0;
/// Used to verify the validity of an access token.
virtual bool verify(const std::string& token) = 0;
};
#if !MOBILEAPP
/// JWT Authorization.
class JWTAuth : public AuthBase
{
public:
JWTAuth(const std::string& name, const std::string& sub, const std::string& aud)
: _name(name),
_sub(sub),
_aud(aud),
_digestEngine(*_key, "SHA256")
{
}
const std::string getAccessToken() override;
bool verify(const std::string& accessToken) override;
static void cleanup();
private:
const std::string createHeader();
const std::string createPayload();
private:
const std::string _alg = "RS256";
const std::string _typ = "JWT";
const std::string _iss = "cool";
const std::string _name;
const std::string _sub;
const std::string _aud;
static std::unique_ptr<Poco::Crypto::RSAKey> _key;
Poco::Crypto::RSADigestEngine _digestEngine;
};
/// OAuth Authorization.
class OAuth : public AuthBase
{
public:
OAuth(const std::string& clientId,
const std::string& clientSecret,
const std::string& tokenEndPoint,
const std::string& authVerifyUrl,
const std::string& authorizationCode) :
_clientId(clientId),
_clientSecret(clientSecret),
_tokenEndPoint(tokenEndPoint),
_authVerifyUrl(authVerifyUrl),
_authorizationCode(authorizationCode)
{
}
const std::string getAccessToken() override;
bool verify(const std::string& token) override;
private:
const std::string _clientId;
const std::string _clientSecret;
const std::string _tokenEndPoint;
const std::string _authVerifyUrl;
const std::string _authorizationCode;
};
#endif
/* vim:set shiftwidth=4 softtabstop=4 expandtab: */