You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
192 lines
6.2 KiB
192 lines
6.2 KiB
From da16f9c20dda74dc689c9564d1791cc2af3ede9d Mon Sep 17 00:00:00 2001
|
|
From: Daniel Golle <daniel@makrotopia.org>
|
|
Date: Thu, 28 Feb 2019 16:23:40 +0100
|
|
Subject: [PATCH] rest-plugins: include headers in dist sources
|
|
|
|
---
|
|
src/rest-plugins/Makefile.am | 2 ++
|
|
1 file changed, 2 insertions(+)
|
|
|
|
--- a/src/rest-plugins/Makefile.am
|
|
+++ b/src/rest-plugins/Makefile.am
|
|
@@ -30,6 +30,7 @@ endif
|
|
|
|
libgnunet_plugin_rest_reclaim_la_SOURCES = \
|
|
plugin_rest_reclaim.c \
|
|
+ json_reclaim.h \
|
|
json_reclaim.c
|
|
libgnunet_plugin_rest_reclaim_la_LIBADD = \
|
|
$(top_builddir)/src/identity/libgnunetidentity.la \
|
|
@@ -117,6 +118,7 @@ libgnunet_plugin_rest_gns_la_LDFLAGS = \
|
|
|
|
libgnunet_plugin_rest_openid_connect_la_SOURCES = \
|
|
plugin_rest_openid_connect.c \
|
|
+ oidc_helper.h \
|
|
oidc_helper.c
|
|
libgnunet_plugin_rest_openid_connect_la_LIBADD = \
|
|
$(top_builddir)/src/identity/libgnunetidentity.la \
|
|
--- /dev/null
|
|
+++ b/src/rest-plugins/oidc_helper.h
|
|
@@ -0,0 +1,111 @@
|
|
+/*
|
|
+ This file is part of GNUnet
|
|
+ Copyright (C) 2010-2015 GNUnet e.V.
|
|
+
|
|
+ GNUnet is free software: you can redistribute it and/or modify it
|
|
+ under the terms of the GNU Affero General Public License as published
|
|
+ by the Free Software Foundation, either version 3 of the License,
|
|
+ or (at your option) any later version.
|
|
+
|
|
+ GNUnet is distributed in the hope that it will be useful, but
|
|
+ WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
+ Affero General Public License for more details.
|
|
+
|
|
+ You should have received a copy of the GNU Affero General Public License
|
|
+ along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
+
|
|
+ SPDX-License-Identifier: AGPL3.0-or-later
|
|
+ */
|
|
+
|
|
+/**
|
|
+ * @file reclaim/oidc_helper.h
|
|
+ * @brief helper library for OIDC related functions
|
|
+ * @author Martin Schanzenbach
|
|
+ */
|
|
+
|
|
+#ifndef JWT_H
|
|
+#define JWT_H
|
|
+
|
|
+#define JWT_ALG "alg"
|
|
+
|
|
+/* Use 512bit HMAC */
|
|
+#define JWT_ALG_VALUE "HS512"
|
|
+
|
|
+#define JWT_TYP "typ"
|
|
+
|
|
+#define JWT_TYP_VALUE "jwt"
|
|
+
|
|
+#define SERVER_ADDRESS "https://api.reclaim"
|
|
+
|
|
+/**
|
|
+ * Create a JWT from attributes
|
|
+ *
|
|
+ * @param aud_key the public of the audience
|
|
+ * @param sub_key the public key of the subject
|
|
+ * @param attrs the attribute list
|
|
+ * @param expiration_time the validity of the token
|
|
+ * @param secret_key the key used to sign the JWT
|
|
+ * @return a new base64-encoded JWT string.
|
|
+ */
|
|
+char*
|
|
+OIDC_id_token_new (const struct GNUNET_CRYPTO_EcdsaPublicKey *aud_key,
|
|
+ const struct GNUNET_CRYPTO_EcdsaPublicKey *sub_key,
|
|
+ const struct GNUNET_RECLAIM_ATTRIBUTE_ClaimList *attrs,
|
|
+ const struct GNUNET_TIME_Relative *expiration_time,
|
|
+ const char *nonce,
|
|
+ const char *secret_key);
|
|
+
|
|
+/**
|
|
+ * Builds an OIDC authorization code including
|
|
+ * a reclaim ticket and nonce
|
|
+ *
|
|
+ * @param issuer the issuer of the ticket, used to sign the ticket and nonce
|
|
+ * @param ticket the ticket to include in the code
|
|
+ * @param nonce the nonce to include in the code
|
|
+ * @return a new authorization code (caller must free)
|
|
+ */
|
|
+char*
|
|
+OIDC_build_authz_code (const struct GNUNET_CRYPTO_EcdsaPrivateKey *issuer,
|
|
+ const struct GNUNET_RECLAIM_Ticket *ticket,
|
|
+ const char* nonce);
|
|
+
|
|
+/**
|
|
+ * Parse reclaim ticket and nonce from
|
|
+ * authorization code.
|
|
+ * This also verifies the signature in the code.
|
|
+ *
|
|
+ * @param audience the expected audience of the code
|
|
+ * @param code the string representation of the code
|
|
+ * @param ticket where to store the ticket
|
|
+ * @param nonce where to store the nonce
|
|
+ * @return GNUNET_OK if successful, else GNUNET_SYSERR
|
|
+ */
|
|
+int
|
|
+OIDC_parse_authz_code (const struct GNUNET_CRYPTO_EcdsaPublicKey *audience,
|
|
+ const char* code,
|
|
+ struct GNUNET_RECLAIM_Ticket **ticket,
|
|
+ char **nonce);
|
|
+
|
|
+/**
|
|
+ * Build a token response for a token request
|
|
+ * TODO: Maybe we should add the scope here?
|
|
+ *
|
|
+ * @param access_token the access token to include
|
|
+ * @param id_token the id_token to include
|
|
+ * @param expiration_time the expiration time of the token(s)
|
|
+ * @param token_response where to store the response
|
|
+ */
|
|
+void
|
|
+OIDC_build_token_response (const char *access_token,
|
|
+ const char *id_token,
|
|
+ const struct GNUNET_TIME_Relative *expiration_time,
|
|
+ char **token_response);
|
|
+/**
|
|
+ * Generate a new access token
|
|
+ */
|
|
+char*
|
|
+OIDC_access_token_new ();
|
|
+
|
|
+
|
|
+#endif
|
|
--- /dev/null
|
|
+++ b/src/rest-plugins/json_reclaim.h
|
|
@@ -0,0 +1,48 @@
|
|
+/*
|
|
+ This file is part of GNUnet.
|
|
+ Copyright (C) 2009-2018 GNUnet e.V.
|
|
+
|
|
+ GNUnet is free software: you can redistribute it and/or modify it
|
|
+ under the terms of the GNU Affero General Public License as published
|
|
+ by the Free Software Foundation, either version 3 of the License,
|
|
+ or (at your option) any later version.
|
|
+
|
|
+ GNUnet is distributed in the hope that it will be useful, but
|
|
+ WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
+ Affero General Public License for more details.
|
|
+
|
|
+ You should have received a copy of the GNU Affero General Public License
|
|
+ along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
+
|
|
+ SPDX-License-Identifier: AGPL3.0-or-later
|
|
+*/
|
|
+
|
|
+/**
|
|
+ * @file rest-plugins/json_reclaim.h
|
|
+ * @brief JSON handling of reclaim data
|
|
+ * @author Martin Schanzenbach
|
|
+ */
|
|
+#include "platform.h"
|
|
+#include "gnunet_util_lib.h"
|
|
+#include "gnunet_json_lib.h"
|
|
+#include "gnunet_reclaim_service.h"
|
|
+#include "gnunet_reclaim_attribute_lib.h"
|
|
+
|
|
+/**
|
|
+ * JSON Specification for Reclaim claims.
|
|
+ *
|
|
+ * @param ticket struct of GNUNET_RECLAIM_ATTRIBUTE_Claim to fill
|
|
+ * @return JSON Specification
|
|
+ */
|
|
+struct GNUNET_JSON_Specification
|
|
+GNUNET_RECLAIM_JSON_spec_claim (struct GNUNET_RECLAIM_ATTRIBUTE_Claim **attr);
|
|
+
|
|
+/**
|
|
+ * JSON Specification for Reclaim tickets.
|
|
+ *
|
|
+ * @param ticket struct of GNUNET_RECLAIM_Ticket to fill
|
|
+ * @return JSON Specification
|
|
+ */
|
|
+struct GNUNET_JSON_Specification
|
|
+GNUNET_RECLAIM_JSON_spec_ticket (struct GNUNET_RECLAIM_Ticket **ticket);
|