jwks_provider.h

Go to the documentation of this file.

// BSD 3-Clause License
// Copyright (c) 2021-2025, 🍀☀🌕🌥 🌊
// See the LICENSE file in the project root for full license information.
 
#pragma once
 
#include <chrono>
#include <cstdint>
#include <functional>
#include <mutex>
#include <optional>
#include <string>
#include <string_view>
#include <vector>
 
namespace kcenon::pacs::web::auth {
 
struct jwk_key {
    std::string kid;    
    std::string kty;    
    std::string alg;    
    std::string use;    
    std::string pem;    
};
 
using jwks_fetch_callback =
    std::function<std::optional<std::string>(const std::string& url)>;
 
class jwks_provider {
public:
    jwks_provider();
 
    bool load_from_json(std::string_view jwks_json);
 
    void set_fetcher(jwks_fetch_callback fetcher);
 
    void set_jwks_url(const std::string& url);
 
    [[nodiscard]] std::optional<jwk_key> get_key(
        std::string_view kid) const;
 
    [[nodiscard]] std::optional<jwk_key> get_key_by_alg(
        std::string_view alg) const;
 
    bool refresh();
 
    [[nodiscard]] const std::vector<jwk_key>& keys() const;
 
    void set_cache_ttl(std::uint32_t seconds);
 
    [[nodiscard]] bool is_cache_expired() const;
 
private:
    mutable std::vector<jwk_key> keys_;
    jwks_fetch_callback fetcher_;
    std::string jwks_url_;
    std::uint32_t cache_ttl_seconds_{3600};
    mutable std::chrono::steady_clock::time_point last_fetch_{};
    mutable std::mutex mutex_;
 
    bool try_refresh() const;
};
 
}  // namespace kcenon::pacs::web::auth