zitadel/internal/crypto/key.go

71 lines
1.5 KiB
Go
Raw Normal View History

2020-03-23 06:06:44 +00:00
package crypto
import (
"crypto/rand"
2020-03-23 06:06:44 +00:00
"github.com/caos/logging"
2020-03-23 07:43:08 +00:00
"github.com/caos/zitadel/internal/errors"
2020-03-23 06:06:44 +00:00
)
type KeyConfig struct {
EncryptionKeyID string
DecryptionKeyIDs []string
}
type Keys map[string]string
type Key struct {
ID string
Value string
}
func NewKey(id string) (*Key, error) {
randBytes := make([]byte, 32)
if _, err := rand.Read(randBytes); err != nil {
return nil, err
2020-03-23 06:06:44 +00:00
}
return &Key{
ID: id,
Value: string(randBytes),
}, nil
2020-03-23 06:06:44 +00:00
}
func LoadKey(id string, keyStorage KeyStorage) (string, error) {
key, err := keyStorage.ReadKey(id)
if err != nil {
return "", err
}
return key.Value, nil
}
func LoadKeys(config *KeyConfig, keyStorage KeyStorage) (Keys, []string, error) {
2020-03-23 06:06:44 +00:00
if config == nil {
return nil, nil, errors.ThrowInvalidArgument(nil, "CRYPT-dJK8s", "config must not be nil")
}
readKeys, err := keyStorage.ReadKeys()
2020-03-23 06:06:44 +00:00
if err != nil {
return nil, nil, err
}
keys := make(Keys)
2020-03-23 06:06:44 +00:00
ids := make([]string, 0, len(config.DecryptionKeyIDs)+1)
if config.EncryptionKeyID != "" {
key, ok := readKeys[config.EncryptionKeyID]
if !ok {
return nil, nil, errors.ThrowInternalf(nil, "CRYPT-v2Kas", "encryption key %s not found", config.EncryptionKeyID)
2020-03-23 06:06:44 +00:00
}
keys[config.EncryptionKeyID] = key
ids = append(ids, config.EncryptionKeyID)
}
for _, id := range config.DecryptionKeyIDs {
key, ok := readKeys[id]
if !ok {
logging.Errorf("description key %s not found", id)
2020-03-23 06:06:44 +00:00
continue
}
keys[id] = key
ids = append(ids, id)
}
return keys, ids, nil
}