gcpsign

Documentation

Overview

Package gcpsign contains a client of GCP Cloud KMS RSA256 asymmetric signning.

Index

• type Client
  • func New(ctx context.Context, projectID, keyRingLocation, keyRingName, keyName string, ...) (*Client, error)
  • func (s *Client) PublicKeys() *jose.JSONWebKeySet
  • func (s *Client) SignJWT(ctx context.Context, claims interface{}, header map[string]string) (string, error)

Types

type Client

type Client struct {
	// contains filtered or unexported fields
}

Client of GCP CloudKMS asymmetric signning service. We use CloudKMS to sign JWT and epxose RSA public keys in KMS for verify.

func New

func New(ctx context.Context, projectID, keyRingLocation, keyRingName, keyName string, client *kms.KeyManagementClient) (*Client, error)

New returns Client.

func (*Client) PublicKeys

func (s *Client) PublicKeys() *jose.JSONWebKeySet

PublicKeys in KMS.

func (*Client) SignJWT

func (s *Client) SignJWT(ctx context.Context, claims interface{}, header map[string]string) (string, error)

SignJWT signs the given claims return the jwt string.