ContainerImage.Pinniped/internal/secret/cache.go

// Copyright 2020 the Pinniped contributors. All Rights Reserved.
// SPDX-License-Identifier: Apache-2.0

package secret

import (
	"sync"
	"sync/atomic"
)

type Cache struct {
	csrfCookieEncoderHashKey atomic.Value
	oidcProviderCacheMap     sync.Map
}

// New returns an empty Cache.
func New() *Cache { return &Cache{} }

type oidcProviderCache struct {
	tokenHMACKey         atomic.Value
	stateEncoderHashKey  atomic.Value
	stateEncoderBlockKey atomic.Value
}

func (c *Cache) GetCSRFCookieEncoderHashKey() []byte {
	return bytesOrNil(c.csrfCookieEncoderHashKey.Load())
}

func (c *Cache) SetCSRFCookieEncoderHashKey(key []byte) {
	c.csrfCookieEncoderHashKey.Store(key)
}

func (c *Cache) GetTokenHMACKey(oidcIssuer string) []byte {
	return bytesOrNil(c.getOIDCProviderCache(oidcIssuer).tokenHMACKey.Load())
}

func (c *Cache) SetTokenHMACKey(oidcIssuer string, key []byte) {
	c.getOIDCProviderCache(oidcIssuer).tokenHMACKey.Store(key)
}

func (c *Cache) GetStateEncoderHashKey(oidcIssuer string) []byte {
	return bytesOrNil(c.getOIDCProviderCache(oidcIssuer).stateEncoderHashKey.Load())
}

func (c *Cache) SetStateEncoderHashKey(oidcIssuer string, key []byte) {
	c.getOIDCProviderCache(oidcIssuer).stateEncoderHashKey.Store(key)
}

func (c *Cache) GetStateEncoderBlockKey(oidcIssuer string) []byte {
	return bytesOrNil(c.getOIDCProviderCache(oidcIssuer).stateEncoderBlockKey.Load())
}

func (c *Cache) SetStateEncoderBlockKey(oidcIssuer string, key []byte) {
	c.getOIDCProviderCache(oidcIssuer).stateEncoderBlockKey.Store(key)
}

func (c *Cache) getOIDCProviderCache(oidcIssuer string) *oidcProviderCache {
	value, ok := c.oidcProviderCacheMap.Load(oidcIssuer)
	if !ok {
		value = &oidcProviderCache{}
		c.oidcProviderCacheMap.Store(oidcIssuer, value)
	}
	return value.(*oidcProviderCache)
}

func bytesOrNil(b interface{}) []byte {
	if b == nil {
		return nil
	}
	return b.([]byte)
}