kmsjwt

README

kmsjwt

This little utility library provides an AWS KMS-based implementation of jwt.SigningMethod.

You will be using an instance of context.Context as the encryption key.

Documentation

Index

• type KMS
• type KMSJWT
  • func New(api KMS, keyID string) *KMSJWT
  • func NewWithPublicKey(api KMS, keyID string, publicKey *rsa.PublicKey) *KMSJWT
  • func (k *KMSJWT) Alg() string
  • func (k *KMSJWT) Sign(signingString string, key interface{}) (string, error)
  • func (k *KMSJWT) Verify(signingString, stringSignature string, key interface{}) error

Types

type KMS

type KMS interface {
	GetPublicKey(context.Context, *kms.GetPublicKeyInput, ...func(*kms.Options)) (*kms.GetPublicKeyOutput, error)
	Sign(context.Context, *kms.SignInput, ...func(*kms.Options)) (*kms.SignOutput, error)
}

KMS implements a small subset of the KMS API.

type KMSJWT

type KMSJWT struct {
	// contains filtered or unexported fields
}

KMSJWT is a JWT signing method implementation using RSA512 with the private key stored in AWS KMS. The public key is retrieved from KMS on initialization.

func New

func New(api KMS, keyID string) *KMSJWT

New provides a KMS-based implementation of JWT signing method.

func NewWithPublicKey

func NewWithPublicKey(api KMS, keyID string, publicKey *rsa.PublicKey) *KMSJWT

NewWithPublicKey provides a KMS-based implementation of JWT signing method with a pre-loaded public key.

func (*KMSJWT) Alg

func (k *KMSJWT) Alg() string

func (*KMSJWT) Sign

func (k *KMSJWT) Sign(signingString string, key interface{}) (string, error)

func (*KMSJWT) Verify

func (k *KMSJWT) Verify(signingString, stringSignature string, key interface{}) error