#include <jwks_provider.h>

Collaboration diagram for kcenon::pacs::web::auth::jwks_provider:

Public Member Functions
	jwks_provider ()

bool	load_from_json (std::string_view jwks_json)
	Load keys from a JWKS JSON string.

void	set_fetcher (jwks_fetch_callback fetcher)
	Set a callback for fetching JWKS from a URL.

void	set_jwks_url (const std::string &url)
	Set the JWKS endpoint URL for fetching.

std::optional< jwk_key >	get_key (std::string_view kid) const
	Get a key by Key ID (kid)

std::optional< jwk_key >	get_key_by_alg (std::string_view alg) const
	Get the first key matching the given algorithm.

bool	refresh ()
	Force refresh keys from the configured JWKS URL.

const std::vector< jwk_key > &	keys () const
	Get all currently loaded keys.

void	set_cache_ttl (std::uint32_t seconds)
	Set cache TTL in seconds (default: 3600)

bool	is_cache_expired () const
	Check if the cache has expired.

Private Member Functions
bool	try_refresh () const

Private Attributes
std::vector< jwk_key >	keys_

jwks_fetch_callback	fetcher_

std::string	jwks_url_

std::uint32_t	cache_ttl_seconds_ {3600}

std::chrono::steady_clock::time_point	last_fetch_ {}

std::mutex	mutex_

Detailed Description

Definition at line 68 of file jwks_provider.h.

Constructor & Destructor Documentation

◆ jwks_provider()

kcenon::pacs::web::auth::jwks_provider::jwks_provider ( )

default

Examples: /home/runner/work/pacs_system/pacs_system/include/kcenon/pacs/web/auth/jwks_provider.h.

Member Function Documentation

◆ get_key()

std::optional< jwk_key > kcenon::pacs::web::auth::jwks_provider::get_key ( std::string_view kid ) const

nodiscard

Get a key by Key ID (kid)

If keys are not loaded or cache has expired, attempts to refresh using the configured fetcher and JWKS URL.

Parameters

kid	Key ID to look up

Returns: Key if found, std::nullopt otherwise

Examples: /home/runner/work/pacs_system/pacs_system/include/kcenon/pacs/web/auth/jwks_provider.h.

Definition at line 260 of file jwks_provider.cpp.

                                                                    {
    std::lock_guard<std::mutex> lock(mutex_);
 
    // Try refresh if cache expired and fetcher available
    if (is_cache_expired() && fetcher_ && !jwks_url_.empty()) {
        try_refresh();
    }
 
    for (const auto& key : keys_) {
        if (key.kid == kid) return key;
    }
    return std::nullopt;
}

References fetcher_, is_cache_expired(), jwks_url_, keys_, mutex_, and try_refresh().

Here is the call graph for this function:

◆ get_key_by_alg()

std::optional< jwk_key > kcenon::pacs::web::auth::jwks_provider::get_key_by_alg ( std::string_view alg ) const

nodiscard

Get the first key matching the given algorithm.

Parameters

alg	Algorithm name (e.g., "RS256")

Returns: Key if found, std::nullopt otherwise

Examples: /home/runner/work/pacs_system/pacs_system/include/kcenon/pacs/web/auth/jwks_provider.h.

Definition at line 274 of file jwks_provider.cpp.

                              {
    std::lock_guard<std::mutex> lock(mutex_);
 
    if (is_cache_expired() && fetcher_ && !jwks_url_.empty()) {
        try_refresh();
    }
 
    for (const auto& key : keys_) {
        if (key.alg == alg) return key;
    }
    return std::nullopt;
}

References fetcher_, is_cache_expired(), jwks_url_, keys_, mutex_, and try_refresh().

Here is the call graph for this function:

◆ is_cache_expired()

bool kcenon::pacs::web::auth::jwks_provider::is_cache_expired ( ) const

nodiscard

Check if the cache has expired.

Examples: /home/runner/work/pacs_system/pacs_system/include/kcenon/pacs/web/auth/jwks_provider.h.

Definition at line 301 of file jwks_provider.cpp.

                                           {
    if (last_fetch_ == std::chrono::steady_clock::time_point{}) return true;
 
    auto elapsed = std::chrono::steady_clock::now() - last_fetch_;
    return elapsed > std::chrono::seconds(cache_ttl_seconds_);
}

References cache_ttl_seconds_, and last_fetch_.

Referenced by get_key(), and get_key_by_alg().

Here is the caller graph for this function:

◆ keys()

const std::vector< jwk_key > & kcenon::pacs::web::auth::jwks_provider::keys ( ) const

nodiscard

Get all currently loaded keys.

Examples: /home/runner/work/pacs_system/pacs_system/include/kcenon/pacs/web/auth/jwks_provider.h.

Definition at line 293 of file jwks_provider.cpp.

                                                    {
    return keys_;
}

References keys_.

◆ load_from_json()

bool kcenon::pacs::web::auth::jwks_provider::load_from_json ( std::string_view jwks_json )

Load keys from a JWKS JSON string.

Parses the JWKS JSON and converts JWK keys to PEM format. Replaces any previously loaded keys.

Parameters

jwks_json JSON string containing {"keys": [...]}

Returns: true if at least one key was successfully loaded

Examples: /home/runner/work/pacs_system/pacs_system/include/kcenon/pacs/web/auth/jwks_provider.h.

Definition at line 227 of file jwks_provider.cpp.

                                                           {
    auto json = crow::json::load(std::string(jwks_json));
    if (!json || !json.has("keys")) return false;
 
    auto& keys_arr = json["keys"];
    if (keys_arr.t() != crow::json::type::List) return false;
 
    std::vector<jwk_key> new_keys;
    for (size_t i = 0; i < keys_arr.size(); ++i) {
        auto key = parse_jwk(keys_arr[i]);
        if (key) {
            new_keys.push_back(std::move(*key));
        }
    }
 
    if (new_keys.empty()) return false;
 
    std::lock_guard<std::mutex> lock(mutex_);
    keys_ = std::move(new_keys);
    last_fetch_ = std::chrono::steady_clock::now();
    return true;
}

References keys_, last_fetch_, and mutex_.

◆ refresh()

bool kcenon::pacs::web::auth::jwks_provider::refresh ( )

Force refresh keys from the configured JWKS URL.

Returns: true if refresh was successful

Examples: /home/runner/work/pacs_system/pacs_system/include/kcenon/pacs/web/auth/jwks_provider.h.

Definition at line 288 of file jwks_provider.cpp.

                            {
    std::lock_guard<std::mutex> lock(mutex_);
    return try_refresh();
}

References mutex_, and try_refresh().

Here is the call graph for this function:

◆ set_cache_ttl()

void kcenon::pacs::web::auth::jwks_provider::set_cache_ttl ( std::uint32_t seconds )

Set cache TTL in seconds (default: 3600)

Examples: /home/runner/work/pacs_system/pacs_system/include/kcenon/pacs/web/auth/jwks_provider.h.

Definition at line 297 of file jwks_provider.cpp.

                                                     {
    cache_ttl_seconds_ = seconds;
}

References cache_ttl_seconds_.

◆ set_fetcher()

void kcenon::pacs::web::auth::jwks_provider::set_fetcher ( jwks_fetch_callback fetcher )

Set a callback for fetching JWKS from a URL.

Parameters

fetcher Callback that receives URL and returns JSON body

Examples: /home/runner/work/pacs_system/pacs_system/include/kcenon/pacs/web/auth/jwks_provider.h.

Definition at line 250 of file jwks_provider.cpp.

                                                           {
    std::lock_guard<std::mutex> lock(mutex_);
    fetcher_ = std::move(fetcher);
}

References fetcher_, and mutex_.

◆ set_jwks_url()

void kcenon::pacs::web::auth::jwks_provider::set_jwks_url ( const std::string & url )

Set the JWKS endpoint URL for fetching.

Parameters

url	JWKS endpoint URL

Examples: /home/runner/work/pacs_system/pacs_system/include/kcenon/pacs/web/auth/jwks_provider.h.

Definition at line 255 of file jwks_provider.cpp.

                                                     {
    std::lock_guard<std::mutex> lock(mutex_);
    jwks_url_ = url;
}

References jwks_url_, and mutex_.

◆ try_refresh()

bool kcenon::pacs::web::auth::jwks_provider::try_refresh ( ) const

private

Examples: /home/runner/work/pacs_system/pacs_system/include/kcenon/pacs/web/auth/jwks_provider.h.

Definition at line 308 of file jwks_provider.cpp.

                                      {
    if (!fetcher_ || jwks_url_.empty()) return false;
 
    auto json_body = fetcher_(jwks_url_);
    if (!json_body) return false;
 
    auto json = crow::json::load(*json_body);
    if (!json || !json.has("keys")) return false;
 
    auto& keys_arr = json["keys"];
    if (keys_arr.t() != crow::json::type::List) return false;
 
    std::vector<jwk_key> new_keys;
    for (size_t i = 0; i < keys_arr.size(); ++i) {
        auto key = parse_jwk(keys_arr[i]);
        if (key) {
            new_keys.push_back(std::move(*key));
        }
    }
 
    if (new_keys.empty()) return false;
 
    keys_ = std::move(new_keys);
    last_fetch_ = std::chrono::steady_clock::now();
    return true;
}