Method: NATS#setup_nkeys_connect

Defined in:

lib/nats/client.rb

#setup_nkeys_connect ⇒ Object

# File 'lib/nats/client.rb', line 1242

def setup_nkeys_connect
  begin
    require 'nkeys'
    require 'base64'
  rescue LoadError
    raise(Error, "nkeys is not installed")
  end

  case
  when @nkeys_seed
    @user_nkey_cb = proc {
      seed = File.read(@nkeys_seed).chomp
      kp = NKEYS::from_seed(seed)

      # Take a copy since original will be gone with the wipe.
      pub_key = kp.public_key.dup
      kp.wipe!

      pub_key
    }

    @signature_cb = proc { |nonce|
      seed = File.read(@nkeys_seed).chomp
      kp = NKEYS::from_seed(seed)
      raw_signed = kp.sign(nonce)
      kp.wipe!
      encoded = Base64.urlsafe_encode64(raw_signed)
      encoded.gsub('=', '')
    }
  when @user_credentials
    # When the credentials are within a single decorated file.
    @user_jwt_cb = proc {
      jwt_start = "BEGIN NATS USER JWT".freeze
      found = false
      jwt = nil
      File.readlines(@user_credentials).each do |line|
        case
        when found
          jwt = line.chomp
          break
        when line.include?(jwt_start)
          found = true
        end
      end
      raise(Error, "No JWT found in #{@user_credentials}") if not found

      jwt
    }

    @signature_cb = proc { |nonce|
      seed_start = "BEGIN USER NKEY SEED".freeze
      found = false
      seed = nil
      File.readlines(@user_credentials).each do |line|
        case
        when found
          seed = line.chomp
          break
        when line.include?(seed_start)
          found = true
        end
      end
      raise(Error, "No nkey user seed found in #{@user_credentials}") if not found

      kp = NKEYS::from_seed(seed)
      raw_signed = kp.sign(nonce)

      # seed is a reference so also cleared when doing wipe,
      # which can be done since Ruby strings are mutable.
      kp.wipe
      encoded = Base64.urlsafe_encode64(raw_signed)

      # Remove padding
      encoded.gsub('=', '')
    }
  end
end