zitadel/internal/domain/machine_key.go

package domain

import (
	"encoding/json"
	"time"

	"github.com/zitadel/zitadel/internal/errors"
	"github.com/zitadel/zitadel/internal/eventstore/v1/models"
)

type MachineKey struct {
	models.ObjectRoot

	KeyID          string
	Type           AuthNKeyType
	ExpirationDate time.Time
	PrivateKey     []byte
	PublicKey      []byte
}

func (key *MachineKey) setPublicKey(publicKey []byte) {
	key.PublicKey = publicKey
}

func (key *MachineKey) setPrivateKey(privateKey []byte) {
	key.PrivateKey = privateKey
}

func (key *MachineKey) expirationDate() time.Time {
	return key.ExpirationDate
}

func (key *MachineKey) setExpirationDate(expiration time.Time) {
	key.ExpirationDate = expiration
}

func (key *MachineKey) Detail() ([]byte, error) {
	if key.Type == AuthNKeyTypeJSON {
		return key.MarshalJSON()
	}
	return nil, errors.ThrowPreconditionFailed(nil, "KEY-dsg52", "Errors.Internal")
}

func (key *MachineKey) MarshalJSON() ([]byte, error) {
	return MachineKeyMarshalJSON(key.KeyID, key.PrivateKey, key.AggregateID)
}

type MachineKeyState int32

const (
	MachineKeyStateUnspecified MachineKeyState = iota
	MachineKeyStateActive
	MachineKeyStateRemoved

	machineKeyStateCount
)

func (f MachineKeyState) Valid() bool {
	return f >= 0 && f < machineKeyStateCount
}

func MachineKeyMarshalJSON(keyID string, privateKey []byte, userID string) ([]byte, error) {
	return json.Marshal(struct {
		Type   string `json:"type"`
		KeyID  string `json:"keyId"`
		Key    string `json:"key"`
		UserID string `json:"userId"`
	}{
		Type:   "serviceaccount",
		KeyID:  keyID,
		Key:    string(privateKey),
		UserID: userID,
	})
}