JWKSSignatureValidator.h

#ifndef TENDUKE_JWK_JWKSVALIDATOR_H
#define TENDUKE_JWK_JWKSVALIDATOR_H
 
#include "./JWKS.h"
#include "./JWKSDownloader.h"
#include "../crypto/MessageDigest.h"
#include "../jwt/JWTSignatureValidator.h"
 
#include <memory>
 
namespace tenduke { namespace jwk {

class JWKSSignatureValidator : public tenduke::jwt::JWTSignatureValidator
{
public:
    explicit JWKSSignatureValidator(
            const std::shared_ptr<tenduke::jwk::JWKS> &keySet,
            tenduke::crypto::MessageDigest::Algorithm validationAlgorithm = tenduke::crypto::MessageDigest::Algorithm::NONE,
            bool requireValidAlgClaim = true
    );
 
public:
    bool validate(
            const tenduke::json::JSONObject *jwtHeader,
            const char * payload,
            std::size_t payloadLength,
            const unsigned char * signatureBytes,
            std::size_t signatureLengthB
    ) const override;
 
protected:
    virtual std::unique_ptr<tenduke::jwk::JWK> findJWK(const std::string &keyId) const;

    virtual void mergeKeys(const tenduke::jwk::JWKS &newKeySet) const;
 
private:
    const std::shared_ptr<tenduke::jwk::JWKS> keySet;
    const tenduke::crypto::MessageDigest::Algorithm algorithm;
    const bool requireValidAlgClaim;
};
 
}}
 
#endif //TENDUKE_JWK_JWKSVALIDATOR_H