service_account_signer.go

package signer

import (
	"context"
	"github.com/fabric8-services/fabric8-auth/authorization/token/manager"
	"github.com/fabric8-services/fabric8-auth/log"
	goaclient "github.com/goadesign/goa/client"
)

type SATokenSigner struct {
	ctx context.Context
}

func NewSATokenSigner(ctx context.Context) SATokenSigner {
	return SATokenSigner{ctx}
}

func (s *SATokenSigner) Signer() (*goaclient.JWTSigner, error) {
	return getServiceAccountSigner(s.ctx)
}

func getServiceAccountSigner(ctx context.Context) (*goaclient.JWTSigner, error) {
	serviceAccountToken, err := getServiceAccountToken(ctx)
	if err != nil {
		return nil, err
	}

	staticToken := goaclient.StaticToken{
		Value: serviceAccountToken,
	}
	jwtSigner := goaclient.JWTSigner{
		TokenSource: &goaclient.StaticTokenSource{
			StaticToken: &staticToken,
		},
	}
	return &jwtSigner, nil
}

func getServiceAccountToken(ctx context.Context) (string, error) {
	tm, err := manager.ReadTokenManagerFromContext(ctx)
	if err != nil {
		log.Error(ctx, map[string]interface{}{
			"error": err,
		}, "unable to obtain service token")
		return "", err
	}
	return tm.AuthServiceAccountToken(), nil
}