hmac.rb

# frozen_string_literal: true

module JWT
  module JWK
    class HMAC
      attr_reader :key
      attr_reader :kid

      KTY = 'oct'.freeze

      def initialize(key, kid = nil)
        raise ArgumentError, 'key must be of type String' unless key.is_a?(String)

        @key = key
        @kid = kid || generate_kid(@key)
      end

      def private?
        true
      end

      # See https://tools.ietf.org/html/rfc7517#appendix-A.3
      def export
        {
          kty: KTY,
          k: key,
          kid: kid
        }
      end

      private

      def generate_kid(hmac_key)
        sequence = OpenSSL::ASN1::Sequence([OpenSSL::ASN1::UTF8String.new(hmac_key),
                                            OpenSSL::ASN1::UTF8String.new(KTY)])
        OpenSSL::Digest::SHA256.hexdigest(sequence.to_der)
      end

      class << self

        def import(jwk_data)
          jwk_k = jwk_data[:k] || jwk_data['k']
          jwk_kid = jwk_data[:kid] || jwk_data['kid']

          raise JWT::JWKError, 'Key format is invalid for HMAC' unless jwk_k

          self.new(jwk_k, jwk_kid)
        end
      end
    end
  end
end