// Copyright 2018 Google LLC

//

// Licensed under the Apache License, Version 2.0 (the "License");

// you may not use this file except in compliance with the License.

// You may obtain a copy of the License at

//

//    https://www.apache.org/licenses/LICENSE-2.0

//

// Unless required by applicable law or agreed to in writing, software

// distributed under the License is distributed on an "AS IS" BASIS,

// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

// See the License for the specific language governing permissions and

// limitations under the License.#pragma once

#pragma once

#include <string>

#include <vector>

#include "jwt_verify_lib/status.h"

#include "openssl/ec.h"

#include "openssl/evp.h"

#include "openssl/pem.h"

namespace google {

namespace jwt_verify {

/**

 *  Class to parse and a hold JSON Web Key Set.

 *

 *  Usage example:

 *    JwksPtr keys = Jwks::createFrom(jwks_string, type);

 *    if (keys->getStatus() == Status::Ok) { ... }

 */

class Jwks : public WithStatus {

 public:

  // Format of public key.

  enum Type { JWKS, PEM };

  // Create from string

  static std::unique_ptr<Jwks> createFrom(const std::string& pkey, Type type);

  // Executes to createFrom with type=PEM and sets additional JWKS paramaters

  // not specified within the PEM.

  static std::unique_ptr<Jwks> createFromPem(const std::string& pkey,

                                             const std::string& kid,

                                             const std::string& alg);

  // Adds a key to this keyset.

  Status addKeyFromPem(const std::string& pkey, const std::string& kid,

                       const std::string& alg);

  // Struct for JSON Web Key

  struct Pubkey {

    std::string hmac_key_;

    std::string kid_;

    std::string kty_;

    std::string alg_;

    std::string crv_;

    bssl::UniquePtr<RSA> rsa_;

    bssl::UniquePtr<EC_KEY> ec_key_;

    std::string okp_key_raw_;

    bssl::UniquePtr<BIO> bio_;

    bssl::UniquePtr<X509> x509_;

  };

  typedef std::unique_ptr<Pubkey> PubkeyPtr;

  // Access to list of Jwks

  const std::vector<PubkeyPtr>& keys() const { return keys_; }

 private:

  // Create Jwks

  void createFromJwksCore(const std::string& pkey_jwks);

  // Create PEM

  void createFromPemCore(const std::string& pkey_pem);

  // List of Jwks

  std::vector<PubkeyPtr> keys_;

};

typedef std::unique_ptr<Jwks> JwksPtr;

}  // namespace jwt_verify

}  // namespace google