Module: SmartHealthCardsTestKit::Utils::Verification

Included in:
Verifier, Verifier
Defined in:
lib/smart_health_cards_test_kit/utils/verification.rb

Overview

Logic for verifying a Payload JWS

Instance Method Summary collapse

Instance Method Details

#resolve_key(jws) ⇒ SmartHealthCardsTestKit::Utils::KeySet

Resolve a key

Parameters:

Returns:



31
32
33
34
35
36
37
38
 
# File 'lib/smart_health_cards_test_kit/utils/verification.rb', line 31

def resolve_key(jws)
  jwks_uri = URI("#{HealthCard.new(jws.to_s).issuer}/.well-known/jwks.json")
  res = Net::HTTP.get(jwks_uri)
  SmartHealthCardsTestKit::Utils::KeySet.from_jwks(res)
# Handle response if key is malformed or unreachable
rescue StandardError => e
  raise ArgumentError, "Unable resolve a valid key from uri #{jwks_uri}: #{e.message}"
end

#verify_using_key_set(verifiable, key_set = nil, resolve_keys: true) ⇒ Boolean

Verify Health Card with given KeySet

Parameters:

Returns:

  • (Boolean) 


13
14
15
16
17
18
19
20
21
22
23
24
25
26
 
# File 'lib/smart_health_cards_test_kit/utils/verification.rb', line 13

def verify_using_key_set(verifiable, key_set = nil, resolve_keys: true)
  jws = JWS.from_jws(verifiable)
  key_set ||= SmartHealthCardsTestKit::Utils::KeySet.new
  key_set.add_keys(resolve_key(jws)) if resolve_keys && key_set.find_key(jws.kid).nil?

  key = key_set.find_key(jws.kid)
  unless key
    raise MissingPublicKeyError,
          'Verifier does not contain public key that is able to verify this signature'
  end

  jws.public_key = key
  jws.verify
end