mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-13 11:34:26 +00:00
699fdaf68e
* feat: add machine tokens * fix test * rename to pat * fix merge and tests * fix scopes * fix migration version * fix test * Update internal/repository/user/personal_access_token.go Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com> Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com>
66 lines
1.6 KiB
Go
66 lines
1.6 KiB
Go
package domain
|
|
|
|
import (
|
|
"github.com/caos/logging"
|
|
|
|
"github.com/caos/zitadel/internal/crypto"
|
|
"github.com/caos/zitadel/internal/errors"
|
|
)
|
|
|
|
type authNKey interface {
|
|
setPublicKey([]byte)
|
|
setPrivateKey([]byte)
|
|
expiration
|
|
}
|
|
|
|
type AuthNKeyType int32
|
|
|
|
const (
|
|
AuthNKeyTypeNONE AuthNKeyType = iota
|
|
AuthNKeyTypeJSON
|
|
|
|
keyCount
|
|
)
|
|
|
|
func (k AuthNKeyType) Valid() bool {
|
|
return k >= 0 && k < keyCount
|
|
}
|
|
|
|
func (key *MachineKey) GenerateNewMachineKeyPair(keySize int) error {
|
|
privateKey, publicKey, err := crypto.GenerateKeyPair(keySize)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
key.PublicKey, err = crypto.PublicKeyToBytes(publicKey)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
key.PrivateKey = crypto.PrivateKeyToBytes(privateKey)
|
|
return nil
|
|
}
|
|
|
|
func SetNewAuthNKeyPair(key authNKey, keySize int) error {
|
|
privateKey, publicKey, err := NewAuthNKeyPair(keySize)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
key.setPrivateKey(privateKey)
|
|
key.setPublicKey(publicKey)
|
|
return nil
|
|
}
|
|
|
|
func NewAuthNKeyPair(keySize int) (privateKey, publicKey []byte, err error) {
|
|
private, public, err := crypto.GenerateKeyPair(keySize)
|
|
if err != nil {
|
|
logging.Log("AUTHN-Ud51I").WithError(err).Error("unable to create authn key pair")
|
|
return nil, nil, errors.ThrowInternal(err, "AUTHN-gdg2l", "Errors.Project.CouldNotGenerateClientSecret")
|
|
}
|
|
publicKey, err = crypto.PublicKeyToBytes(public)
|
|
if err != nil {
|
|
logging.Log("AUTHN-Dbb35").WithError(err).Error("unable to convert public key")
|
|
return nil, nil, errors.ThrowInternal(err, "AUTHN-Bne3f", "Errors.Project.CouldNotGenerateClientSecret")
|
|
}
|
|
privateKey = crypto.PrivateKeyToBytes(private)
|
|
return privateKey, publicKey, nil
|
|
}
|