Class: Authentic::KeyStore

Inherits:
Object
  • Object
show all
Defined in:
lib/authentic/key_store.rb

Overview

Internal: Key store for caching JWKs.

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(max_age, data = {}) ⇒ KeyStore

Returns a new instance of KeyStore.



12
13
14
15
 
# File 'lib/authentic/key_store.rb', line 12

def initialize(max_age, data = {})
  @data = data
  @max_age_seconds = human_time_to_seconds(max_age)
end

Instance Attribute Details

#data ⇒ Object (readonly)

Public: cache data



10
11
12
 
# File 'lib/authentic/key_store.rb', line 10

def data
  @data
end

#max_age ⇒ Object (readonly)

Public: cache data



10
11
12
 
# File 'lib/authentic/key_store.rb', line 10

def max_age
  @max_age
end

#max_age_seconds ⇒ Object (readonly)

Public: cache data



10
11
12
 
# File 'lib/authentic/key_store.rb', line 10

def max_age_seconds
  @max_age_seconds
end

Instance Method Details

#expires!(key) ⇒ Object

Internal: Verifies if data is expired and unset it



53
54
55
 
# File 'lib/authentic/key_store.rb', line 53

def expires!(key)
  unset(key) if data[key]&.expired?
end

#get(iss, kid) ⇒ Object

Public: Sets data, and wraps it in OIDCKey class if not presented as that type.

iss - issuer kid - key id

Returns JSON::JWK



23
24
25
26
27
 
# File 'lib/authentic/key_store.rb', line 23

def get(iss, kid)
  key = get_key(iss, kid)
  expires!(key)
  data[key]&.value
end

#get_key(iss, kid) ⇒ Object

Internal: builds cache key

iss - issuer kid - key id

Returns string



35
36
37
 
# File 'lib/authentic/key_store.rb', line 35

def get_key(iss, kid)
  "#{iss}/#{kid}"
end

#human_time_to_seconds(time) ⇒ Object

Internal: converts human time to seconds for consumption of the cache service. Format example: ‘10h5m30s`. All units are optional.

time - time to convert, it is a string that represents time in hours, minutes, and seconds.

Returns seconds.



70
71
72
73
74
75
76
 
# File 'lib/authentic/key_store.rb', line 70

def human_time_to_seconds(time)
  m = /(?:(\d*)h)?\s?(?:(\d*)?m)?\s?(?:(\d*)?s)?/.match(time)
  h = ((m[1].to_i || 0) * 60) * 60
  mi = (m[2].to_i || 0) * 60
  s = (m[3].to_i || 0)
  h + mi + s
end

#set(iss, kid, new_data) ⇒ Object

Public: Sets data, and wraps it in OIDCKey class if not presented as that type.

iss - issuer kid - key id data - data to cache which is usually a single OIDC public key.

Returns JSON::JWK



46
47
48
49
50
 
# File 'lib/authentic/key_store.rb', line 46

def set(iss, kid, new_data)
  key = get_key(iss, kid)
  data[key] = new_data.is_a?(OIDCKey) ? new_data : OIDCKey.new(new_data, max_age_seconds)
  get(iss, kid)
end

#unset(key) ⇒ Object

Internal: deletes data from cache



58
59
60
 
# File 'lib/authentic/key_store.rb', line 58

def unset(key)
  data.delete(key)
end