Initial QSfera import

Server/vendor/github.com/lestrrat-go/jwx/v3/jws/legacy.go

@@ -0,0 +1,91 @@
+package jws
+
+import (
+	"fmt"
+	"sync"
+
+	"github.com/lestrrat-go/jwx/v3/jwa"
+	"github.com/lestrrat-go/jwx/v3/jws/legacy"
+)
+
+var enableLegacySignersOnce = &sync.Once{}
+
+func enableLegacySigners() {
+	for _, alg := range []jwa.SignatureAlgorithm{jwa.HS256(), jwa.HS384(), jwa.HS512()} {
+		if err := RegisterSigner(alg, func(alg jwa.SignatureAlgorithm) SignerFactory {
+			return SignerFactoryFn(func() (Signer, error) {
+				return legacy.NewHMACSigner(alg), nil
+			})
+		}(alg)); err != nil {
+			panic(fmt.Sprintf("RegisterSigner failed: %v", err))
+		}
+		if err := RegisterVerifier(alg, func(alg jwa.SignatureAlgorithm) VerifierFactory {
+			return VerifierFactoryFn(func() (Verifier, error) {
+				return legacy.NewHMACVerifier(alg), nil
+			})
+		}(alg)); err != nil {
+			panic(fmt.Sprintf("RegisterVerifier failed: %v", err))
+		}
+	}
+
+	for _, alg := range []jwa.SignatureAlgorithm{jwa.RS256(), jwa.RS384(), jwa.RS512(), jwa.PS256(), jwa.PS384(), jwa.PS512()} {
+		if err := RegisterSigner(alg, func(alg jwa.SignatureAlgorithm) SignerFactory {
+			return SignerFactoryFn(func() (Signer, error) {
+				return legacy.NewRSASigner(alg), nil
+			})
+		}(alg)); err != nil {
+			panic(fmt.Sprintf("RegisterSigner failed: %v", err))
+		}
+		if err := RegisterVerifier(alg, func(alg jwa.SignatureAlgorithm) VerifierFactory {
+			return VerifierFactoryFn(func() (Verifier, error) {
+				return legacy.NewRSAVerifier(alg), nil
+			})
+		}(alg)); err != nil {
+			panic(fmt.Sprintf("RegisterVerifier failed: %v", err))
+		}
+	}
+	for _, alg := range []jwa.SignatureAlgorithm{jwa.ES256(), jwa.ES384(), jwa.ES512(), jwa.ES256K()} {
+		if err := RegisterSigner(alg, func(alg jwa.SignatureAlgorithm) SignerFactory {
+			return SignerFactoryFn(func() (Signer, error) {
+				return legacy.NewECDSASigner(alg), nil
+			})
+		}(alg)); err != nil {
+			panic(fmt.Sprintf("RegisterSigner failed: %v", err))
+		}
+		if err := RegisterVerifier(alg, func(alg jwa.SignatureAlgorithm) VerifierFactory {
+			return VerifierFactoryFn(func() (Verifier, error) {
+				return legacy.NewECDSAVerifier(alg), nil
+			})
+		}(alg)); err != nil {
+			panic(fmt.Sprintf("RegisterVerifier failed: %v", err))
+		}
+	}
+
+	if err := RegisterSigner(jwa.EdDSA(), SignerFactoryFn(func() (Signer, error) {
+		return legacy.NewEdDSASigner(), nil
+	})); err != nil {
+		panic(fmt.Sprintf("RegisterSigner failed: %v", err))
+	}
+	if err := RegisterVerifier(jwa.EdDSA(), VerifierFactoryFn(func() (Verifier, error) {
+		return legacy.NewEdDSAVerifier(), nil
+	})); err != nil {
+		panic(fmt.Sprintf("RegisterVerifier failed: %v", err))
+	}
+}
+
+func legacySignerFor(alg jwa.SignatureAlgorithm) (Signer, error) {
+	muSigner.Lock()
+	s, ok := signers[alg]
+	if !ok {
+		v, err := newLegacySigner(alg)
+		if err != nil {
+			muSigner.Unlock()
+			return nil, fmt.Errorf(`failed to create payload signer: %w`, err)
+		}
+		signers[alg] = v
+		s = v
+	}
+	muSigner.Unlock()
+
+	return s, nil
+}