sig-auth/server/server.go
2025-02-22 15:10:37 -05:00

56 lines
1.2 KiB
Go

package server
import (
"context"
"crypto"
"fmt"
"net/http"
"github.com/common-fate/httpsig"
"github.com/common-fate/httpsig/inmemory"
)
func Start(publicKey crypto.PublicKey) error {
keyDir := InMemoryDirectory{
records: map[string]KeyEntry{},
}
keyId := "test-id"
keyDir.records[keyId] = KeyEntry{
alg: "ed25519",
publicKey: publicKey,
userId: "test_user",
}
mux := http.NewServeMux()
verifier := httpsig.Middleware(httpsig.MiddlewareOpts{
NonceStorage: inmemory.NewNonceStorage(),
KeyDirectory: &keyDir,
Tag: "auth",
Scheme: "http",
Authority: "localhost:8080",
OnValidationError: func(ctx context.Context, err error) {
fmt.Printf("validation error: %s\n", err)
},
OnDeriveSigningString: func(ctx context.Context, stringToSign string) {
fmt.Printf("string to sign:\n%s\n", stringToSign)
},
})
mux.Handle("/", verifier(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
fmt.Printf("Responding...\n")
attr := httpsig.AttributesFromContext(r.Context()).(string)
fmt.Printf("User is %s\n", attr)
msg := fmt.Sprintf("hello, %s!", attr)
w.Write([]byte(msg))
fmt.Printf("Responded...\n")
})))
err := http.ListenAndServe("localhost:8080", mux)
return err
}