Function makePacketBrokerTokenIssuer

pkg/interop/util_test.go:107–156

(ctx context.Context, subject string)

}

func makePacketBrokerTokenIssuer(ctx context.Context, subject string) (iss string, tok func(aud string) string) {
	public, private, err := ed25519.GenerateKey(nil)
	if err != nil {
		panic(err)
	}
	var (
		publicJWK = jose.JSONWebKey{
			Algorithm: string(jose.EdDSA),
			Key:       public,
			KeyID:     "test",
		}
		privateJWK = jose.JSONWebKey{
			Algorithm: string(jose.EdDSA),
			Key:       private,
			KeyID:     "test",
		}
		sig = test.Must(jose.NewSigner(jose.SigningKey{
			Algorithm: jose.SignatureAlgorithm(privateJWK.Algorithm),
			Key:       privateJWK,
		}, new(jose.SignerOptions).WithType("JWT"))).(jose.Signer)
	)

	router := mux.NewRouter()
	router.Handle("/.well-known/jwks.json", http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		w.Header().Set("Content-Type", "application/json")
		json.NewEncoder(w).Encode(&jose.JSONWebKeySet{ //nolint:errcheck
			Keys: []jose.JSONWebKey{publicJWK},
		})
	}))
	srv := httptest.NewServer(router)

	go func() {
		<-ctx.Done()
		srv.Close()
	}()

	return srv.URL, func(aud string) string {
		claims := packetbroker.TokenClaims{
			Claims: jwt.Claims{
				Issuer:   srv.URL,
				Subject:  subject,
				Audience: jwt.Audience{aud},
			},
			PacketBroker: packetbroker.IAMTokenClaims{
				Cluster: true,
			},
		}
		return test.Must(jwt.Signed(sig).Claims(claims).CompactSerialize())
	}
}