wehub-resource-sync
72 lines
2.2 KiB
Lua
72 lines
2.2 KiB
Lua
local typedefs = require "kong.db.schema.typedefs"
|
|
local openssl_pkey = require "resty.openssl.pkey"
|
|
|
|
local function validate_ssl_key(key)
|
|
local _, err = openssl_pkey.new(key)
|
|
if err then
|
|
return nil, "invalid key"
|
|
end
|
|
|
|
return true
|
|
end
|
|
|
|
return {
|
|
{
|
|
name = "jwt_secrets",
|
|
primary_key = { "id" },
|
|
cache_key = { "key" },
|
|
endpoint_key = "key",
|
|
workspaceable = true,
|
|
admin_api_name = "jwts",
|
|
admin_api_nested_name = "jwt",
|
|
fields = {
|
|
{ id = typedefs.uuid },
|
|
{ created_at = typedefs.auto_timestamp_s },
|
|
{ consumer = { type = "foreign", reference = "consumers", required = true, on_delete = "cascade", }, },
|
|
{ key = { type = "string", required = false, unique = true, auto = true }, },
|
|
{ secret = { type = "string", auto = true }, },
|
|
{ rsa_public_key = { type = "string" }, },
|
|
{ algorithm = {
|
|
type = "string",
|
|
default = "HS256",
|
|
one_of = {
|
|
"HS256",
|
|
"HS384",
|
|
"HS512",
|
|
"RS256",
|
|
"RS384",
|
|
"RS512",
|
|
"ES256",
|
|
"ES384",
|
|
"ES512",
|
|
"PS256",
|
|
"PS384",
|
|
"PS512",
|
|
"EdDSA",
|
|
},
|
|
}, },
|
|
{ tags = typedefs.tags },
|
|
},
|
|
entity_checks = {
|
|
{ conditional = { if_field = "algorithm",
|
|
if_match = {
|
|
match_any = { patterns = { "^RS256$",
|
|
"^RS384$",
|
|
"^RS512$",
|
|
"^PS256$",
|
|
"^PS384$",
|
|
"^PS512$",
|
|
"^EdDSA$",
|
|
}, },
|
|
},
|
|
then_field = "rsa_public_key",
|
|
then_match = {
|
|
required = true,
|
|
custom_validator = validate_ssl_key,
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
}
|