80 lines
2.0 KiB
Go
80 lines
2.0 KiB
Go
// Copyright 2020 the Pinniped contributors. All Rights Reserved.
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package secret
|
|
|
|
// TODO: synchronize me.
|
|
// TODO: use SetIssuerXXX() functions instead of returning a struct so that we don't have to worry about reentrancy.
|
|
|
|
type Cache struct {
|
|
csrfCookieEncoderHashKey []byte
|
|
csrfCookieEncoderBlockKey []byte
|
|
oidcProviderCacheMap map[string]*OIDCProviderCache
|
|
}
|
|
|
|
func (c *Cache) GetCSRFCookieEncoderHashKey() []byte {
|
|
return c.csrfCookieEncoderHashKey
|
|
}
|
|
|
|
func (c *Cache) SetCSRFCookieEncoderHashKey(key []byte) {
|
|
c.csrfCookieEncoderHashKey = key
|
|
}
|
|
|
|
func (c *Cache) GetCSRFCookieEncoderBlockKey() []byte {
|
|
return c.csrfCookieEncoderBlockKey
|
|
}
|
|
|
|
func (c *Cache) SetCSRFCookieEncoderBlockKey(key []byte) {
|
|
c.csrfCookieEncoderBlockKey = key
|
|
}
|
|
|
|
func (c *Cache) GetOIDCProviderCacheFor(oidcIssuer string) *OIDCProviderCache {
|
|
oidcProvider, ok := c.oidcProviderCaches()[oidcIssuer]
|
|
if !ok {
|
|
oidcProvider = &OIDCProviderCache{}
|
|
c.oidcProviderCaches()[oidcIssuer] = oidcProvider
|
|
}
|
|
return oidcProvider
|
|
}
|
|
|
|
func (c *Cache) SetOIDCProviderCacheFor(oidcIssuer string, oidcProviderCache *OIDCProviderCache) {
|
|
c.oidcProviderCaches()[oidcIssuer] = oidcProviderCache
|
|
}
|
|
|
|
func (c *Cache) oidcProviderCaches() map[string]*OIDCProviderCache {
|
|
if c.oidcProviderCacheMap == nil {
|
|
c.oidcProviderCacheMap = map[string]*OIDCProviderCache{}
|
|
}
|
|
return c.oidcProviderCacheMap
|
|
}
|
|
|
|
type OIDCProviderCache struct {
|
|
tokenHMACKey []byte
|
|
stateEncoderHashKey []byte
|
|
stateEncoderBlockKey []byte
|
|
}
|
|
|
|
func (o *OIDCProviderCache) GetTokenHMACKey() []byte {
|
|
return o.tokenHMACKey
|
|
}
|
|
|
|
func (o *OIDCProviderCache) SetTokenHMACKey(key []byte) {
|
|
o.tokenHMACKey = key
|
|
}
|
|
|
|
func (o *OIDCProviderCache) GetStateEncoderHashKey() []byte {
|
|
return o.stateEncoderHashKey
|
|
}
|
|
|
|
func (o *OIDCProviderCache) SetStateEncoderHashKey(key []byte) {
|
|
o.stateEncoderHashKey = key
|
|
}
|
|
|
|
func (o *OIDCProviderCache) GetStateEncoderBlockKey() []byte {
|
|
return o.stateEncoderBlockKey
|
|
}
|
|
|
|
func (o *OIDCProviderCache) SetStateEncoderBlockKey(key []byte) {
|
|
o.stateEncoderBlockKey = key
|
|
}
|