72 lines
1.8 KiB
Go
72 lines
1.8 KiB
Go
// Copyright 2020 the Pinniped contributors. All Rights Reserved.
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package secret
|
|
|
|
import (
|
|
"sync"
|
|
"sync/atomic"
|
|
)
|
|
|
|
type Cache struct {
|
|
csrfCookieEncoderHashKey atomic.Value
|
|
oidcProviderCacheMap sync.Map
|
|
}
|
|
|
|
// New returns an empty Cache.
|
|
func New() *Cache { return &Cache{} }
|
|
|
|
type oidcProviderCache struct {
|
|
tokenHMACKey atomic.Value
|
|
stateEncoderHashKey atomic.Value
|
|
stateEncoderBlockKey atomic.Value
|
|
}
|
|
|
|
func (c *Cache) GetCSRFCookieEncoderHashKey() []byte {
|
|
return bytesOrNil(c.csrfCookieEncoderHashKey.Load())
|
|
}
|
|
|
|
func (c *Cache) SetCSRFCookieEncoderHashKey(key []byte) {
|
|
c.csrfCookieEncoderHashKey.Store(key)
|
|
}
|
|
|
|
func (c *Cache) GetTokenHMACKey(oidcIssuer string) []byte {
|
|
return bytesOrNil(c.getOIDCProviderCache(oidcIssuer).tokenHMACKey.Load())
|
|
}
|
|
|
|
func (c *Cache) SetTokenHMACKey(oidcIssuer string, key []byte) {
|
|
c.getOIDCProviderCache(oidcIssuer).tokenHMACKey.Store(key)
|
|
}
|
|
|
|
func (c *Cache) GetStateEncoderHashKey(oidcIssuer string) []byte {
|
|
return bytesOrNil(c.getOIDCProviderCache(oidcIssuer).stateEncoderHashKey.Load())
|
|
}
|
|
|
|
func (c *Cache) SetStateEncoderHashKey(oidcIssuer string, key []byte) {
|
|
c.getOIDCProviderCache(oidcIssuer).stateEncoderHashKey.Store(key)
|
|
}
|
|
|
|
func (c *Cache) GetStateEncoderBlockKey(oidcIssuer string) []byte {
|
|
return bytesOrNil(c.getOIDCProviderCache(oidcIssuer).stateEncoderBlockKey.Load())
|
|
}
|
|
|
|
func (c *Cache) SetStateEncoderBlockKey(oidcIssuer string, key []byte) {
|
|
c.getOIDCProviderCache(oidcIssuer).stateEncoderBlockKey.Store(key)
|
|
}
|
|
|
|
func (c *Cache) getOIDCProviderCache(oidcIssuer string) *oidcProviderCache {
|
|
value, ok := c.oidcProviderCacheMap.Load(oidcIssuer)
|
|
if !ok {
|
|
value = &oidcProviderCache{}
|
|
c.oidcProviderCacheMap.Store(oidcIssuer, value)
|
|
}
|
|
return value.(*oidcProviderCache)
|
|
}
|
|
|
|
func bytesOrNil(b interface{}) []byte {
|
|
if b == nil {
|
|
return nil
|
|
}
|
|
return b.([]byte)
|
|
}
|