Add schemas and functions to query signing keys from servers

This commit is contained in:
Pim Kunis 2021-08-13 00:45:07 +02:00
parent e6b3c4752d
commit fb59fee754
13 changed files with 234 additions and 34 deletions

View file

@ -3,13 +3,13 @@ defmodule MatrixServerWeb.Federation.KeyController do
import MatrixServerWeb.Plug.Error
alias MatrixServer.SigningServer
alias MatrixServer.KeyServer
@key_valid_time_ms 1000 * 60 * 24 * 30
def get_signing_keys(conn, _params) do
keys =
SigningServer.get_signing_keys(true)
KeyServer.get_own_signing_keys()
|> Enum.into(%{}, fn {key_id, key} ->
{key_id, %{"key" => key}}
end)
@ -21,13 +21,15 @@ defmodule MatrixServerWeb.Federation.KeyController do
valid_until_ts: System.os_time(:millisecond) + @key_valid_time_ms
}
case SigningServer.sign_object(data) do
{:ok, signed_data} ->
case KeyServer.sign_object(data) do
{:ok, sig, key_id} ->
signed_data = MatrixServer.add_signature(data, key_id, sig)
conn
|> put_status(200)
|> json(signed_data)
{:error, _msg} ->
:error ->
put_error(conn, :unknown, "Error signing object.")
end
end

View file

@ -0,0 +1,36 @@
defmodule MatrixServerWeb.Federation.Request.GetSigningKeys do
use Ecto.Schema
import Ecto.Changeset
@primary_key false
embedded_schema do
field :server_name, :string
field :verify_keys, {:map, {:map, :string}}
field :old_verify_keys, {:map, :map}
field :signatures, {:map, {:map, :string}}
field :valid_until_ts, :integer
end
def changeset(params) do
# TODO: There must be a better way to validate embedded maps?
%__MODULE__{}
|> cast(params, [:server_name, :verify_keys, :old_verify_keys, :signatures, :valid_until_ts])
|> validate_required([:server_name, :verify_keys, :valid_until_ts])
|> MatrixServer.validate_change_simple(:verify_keys, fn map ->
Enum.all?(map, fn {_, map} ->
is_map_key(map, "key")
end)
end)
|> MatrixServer.validate_change_simple(:old_verify_keys, fn map ->
Enum.all?(map, fn
{_, %{"key" => key, "expired_ts" => expired_ts}}
when is_binary(key) and is_integer(expired_ts) ->
true
_ ->
false
end)
end)
end
end