97 lines
2.8 KiB
Rust
97 lines
2.8 KiB
Rust
use chrono::Utc;
|
|
use rsa::RsaPrivateKey;
|
|
|
|
use crate::utils::crypto::{sign_message, get_message_digest};
|
|
|
|
pub struct SignatureHeaders {
|
|
pub host: String,
|
|
pub date: String,
|
|
pub digest: String,
|
|
pub signature: String,
|
|
}
|
|
|
|
#[derive(thiserror::Error, Debug)]
|
|
pub enum SignatureError {
|
|
#[error("invalid request url")]
|
|
UrlError,
|
|
|
|
#[error("signature error")]
|
|
SignatureError(#[from] rsa::errors::Error),
|
|
}
|
|
|
|
/// Creates HTTP signature according to the old HTTP Signatures Spec:
|
|
/// https://datatracker.ietf.org/doc/html/draft-cavage-http-signatures.
|
|
pub fn create_http_signature(
|
|
request_url: &str,
|
|
request_body: &str,
|
|
actor_key: RsaPrivateKey,
|
|
actor_key_id: String,
|
|
) -> Result<SignatureHeaders, SignatureError> {
|
|
let request_url_object = url::Url::parse(request_url)
|
|
.map_err(|_| SignatureError::UrlError)?;
|
|
let host = request_url_object.host_str()
|
|
.ok_or(SignatureError::UrlError)?;
|
|
let date = Utc::now().to_rfc2822();
|
|
let digest = get_message_digest(request_body);
|
|
let message = format!(
|
|
"(request-target): post {}\nhost: {}\ndate: {}\ndigest: {}",
|
|
request_url_object.path(),
|
|
host,
|
|
date,
|
|
digest,
|
|
);
|
|
let headers_parameter = &["(request-target)", "host", "date", "digest"];
|
|
let signature_parameter = sign_message(&actor_key, &message)?;
|
|
let signature_header = format!(
|
|
r#"keyId="{}",headers="{}",signature="{}""#,
|
|
actor_key_id,
|
|
headers_parameter.join(" "),
|
|
signature_parameter,
|
|
);
|
|
let headers = SignatureHeaders {
|
|
host: host.to_string(),
|
|
date,
|
|
digest,
|
|
signature: signature_header,
|
|
};
|
|
Ok(headers)
|
|
}
|
|
|
|
#[cfg(test)]
|
|
mod tests {
|
|
use rand::rngs::OsRng;
|
|
use super::*;
|
|
|
|
#[test]
|
|
fn test_create_signature() {
|
|
let request_url = "https://example.org/inbox";
|
|
let request_body = "{}";
|
|
let actor_key = RsaPrivateKey::new(&mut OsRng, 512).unwrap();
|
|
let actor_key_id = "https://myserver.org/actor#main-key";
|
|
|
|
let result = create_http_signature(
|
|
request_url,
|
|
request_body,
|
|
actor_key,
|
|
actor_key_id.to_string(),
|
|
);
|
|
assert_eq!(result.is_ok(), true);
|
|
|
|
let headers = result.unwrap();
|
|
assert_eq!(headers.host, "example.org");
|
|
assert_eq!(
|
|
headers.digest,
|
|
"SHA-256=RBNvo1WzZ4oRRq0W9+hknpT7T8If536DEMBg9hyq/4o=",
|
|
);
|
|
let expected_signature_header = concat!(
|
|
r#"keyId="https://myserver.org/actor#main-key","#,
|
|
r#"headers="(request-target) host date digest","#,
|
|
r#"signature=""#,
|
|
);
|
|
assert_eq!(
|
|
headers.signature.starts_with(expected_signature_header),
|
|
true,
|
|
);
|
|
}
|
|
}
|