signer

type AccessKeyStore interface {
	GetSecret(id string) (string, bool)
}

type Context struct {
	Time   time.Time
	Scopes []string

	ExpireTime time.Duration

	AccessKeyID      string
	AccessKeySecret  string
	SignedHeaders    string
	CanonicalHeaders string

	Signature string
	Query     url.Values
	BodyHash  string
	// contains filtered or unexported fields
}

type HeaderHoisting struct {
	AllowedPrefix    []string `json:"allowedPrefix,omitempty" jsonschema:"uniqueItems=true"`
	DisallowedPrefix []string `json:"disallowedPrefix,omitempty" jsonschema:"uniqueItems=true"`
	Disallowed       []string `json:"disallowed,omitempty" jsonschema:"uniqueItems=true"`
	// contains filtered or unexported fields
}

type Literal struct {
	// ScopeSuffix is the last part when build the credential scope.
	// Default: megaease_request
	ScopeSuffix string `json:"scopeSuffix" jsonschema:"required"`

	// AlgorithmName is the query name of the signature algorithm
	// Default: X-Me-Algorithm
	AlgorithmName string `json:"algorithmName" jsonschema:"required"`

	// AlgorithmName is the header/query value of the signature algorithm
	// Default: ME-HMAC-SHA256
	AlgorithmValue string `json:"algorithmValue" jsonschema:"required"`

	// SignedHeaders is the header/query headers of the signed headers
	// Default: X-Me-SignedHeaders
	SignedHeaders string `json:"signedHeaders" jsonschema:"required"`

	// Signature is the query name of the signature
	// Default: X-Me-Signature
	Signature string `json:"signature" jsonschema:"required"`

	// Date is the header/query name of request time
	// Default: X-Me-Date
	Date string `json:"date" jsonschema:"required"`

	// Expires is the query name of expire duration
	// Default: X-Me-Expires
	Expires string `json:"expires" jsonschema:"required"`

	// Credential is the query name of credential
	// Default: X-Me-Credential
	Credential string `json:"credential" jsonschema:"required"`

	// ContentSHA256 is the header name of body/payload hash
	// Default: X-Me-Content-Sha256
	ContentSHA256 string `json:"contentSha256" jsonschema:"required"`

	// SigningKeyPrefix is prepend to access key secret when derive the signing key
	// Default: ME
	SigningKeyPrefix string `json:"signingKeyPrefix,omitempty"`
}

type Signer struct {
	// contains filtered or unexported fields
}

type Spec struct {
	Literal         *Literal          `json:"literal,omitempty"`
	HeaderHoisting  *HeaderHoisting   `json:"headerHoisting,omitempty"`
	IgnoredHeaders  []string          `json:"ignoredHeaders,omitempty" jsonschema:"uniqueItems=true"`
	ExcludeBody     bool              `json:"excludeBody,omitempty"`
	TTL             string            `json:"ttl,omitempty" jsonschema:"format=duration"`
	AccessKeyID     string            `json:"accessKeyId,omitempty"`
	AccessKeySecret string            `json:"accessKeySecret,omitempty"`
	AccessKeys      map[string]string `json:"accessKeys,omitempty"`
}