Skip to content

Implement io.jwt.verify_eddsa builtin (closes #145) #153

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
ume3445 wants to merge 1 commit into
base: main
Choose a base branch
from
+26 −0
Open

Implement io.jwt.verify_eddsa builtin (closes #145) #153

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 26 additions & 0 deletions ...-token/src/main/java/io/github/open_policy_agent/opa/ast/builtin/impls/TokenBuiltins.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -69,6 +69,7 @@ public Map<String, BiFunction<EvaluationContext, RegoValue[], RegoValue>> builti
Map.entry("io.jwt.verify_es256", instance::verifyES256),
Map.entry("io.jwt.verify_es384", instance::verifyES384),
Map.entry("io.jwt.verify_es512", instance::verifyES512),
Map.entry("io.jwt.verify_eddsa", instance::verifyEdDSA),
Map.entry("io.jwt.encode_sign", instance::encodeSign),
Map.entry("io.jwt.encode_sign_raw", instance::encodeSignRaw));
}
Expand Down Expand Up @@ -849,6 +850,31 @@ public RegoBoolean verifyES512(EvaluationContext ctx, RegoValue[] args) {
return _verifyECDSA(jwt.getValue(), cert.getValue(), ctx.isStrictBuiltinErrors(), "ES512");
}

@OpaBuiltin(
name = "io.jwt.verify_eddsa",
description = "Verifies if a EdDSA JWT signature is valid.",
args = {
@OpaType(
type = "string",
name = "jwt",
description = "JWT token whose signature is to be verified"),
@OpaType(
type = "string",
name = "certificate",
description =
"PEM encoded certificate, PEM encoded public key, or the JWK key (set) used to verify the signature")
},
result =
@OpaType(
type = "boolean",
name = "result",
description = "`true` if the signature is valid, `false` otherwise"))
public RegoBoolean verifyEdDSA(EvaluationContext ctx, RegoValue[] args) {
RegoString jwt = getArg(args, 0, RegoString.class);
RegoString cert = getArg(args, 1, RegoString.class);
return _verifyEdDSA(jwt.getValue(), cert.getValue(), ctx.isStrictBuiltinErrors());
}

@OpaBuiltin(
name = "io.jwt.verify_rs256",
description = "Verifies if a RS256 JWT signature is valid.",
Expand Down