Example #1
0
        public static SecurityKey GetSecurityKey(Algorithm alg, IConfiguration config, Azure azure)
        {
            SecurityKey         securityKey;
            string              readKeyIntoString = string.Empty;
            var                 keyModel          = new KeyModel();
            HttpResponseMessage resp;
            var                 content = string.Empty;
            SecretPayload       secret;

            switch (alg)
            {
            case Algorithm.HS256:
                resp = azure.GetValueBySecretName(config["Jwt:Key:HS256:SymmetricKeyJson"]).Result;
                if (resp.StatusCode == HttpStatusCode.OK)
                {
                    content           = resp.Content.ReadAsStringAsync().Result;
                    secret            = JsonConvert.DeserializeObject <SecretPayload>(content);
                    readKeyIntoString = secret.value;
                }
                keyModel    = JsonConvert.DeserializeObject <KeyModel>(readKeyIntoString);
                securityKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(keyModel.Key));
                break;

            case Algorithm.RS256:
                RSA publicRsa = RSA.Create();

                resp = azure.GetValueBySecretName(config["Jwt:Key:RS256:PublicKeyXml"]).Result;
                if (resp.StatusCode == HttpStatusCode.OK)
                {
                    content           = resp.Content.ReadAsStringAsync().Result;
                    secret            = JsonConvert.DeserializeObject <SecretPayload>(content);
                    readKeyIntoString = secret.value;
                }
                publicRsa.fromXmlString(readKeyIntoString);
                securityKey = new RsaSecurityKey(publicRsa);
                break;

            case Algorithm.ES256:
                resp = azure.GetValueBySecretName(config["Jwt:Key:ES256:PublicKeyJson"]).Result;
                if (resp.StatusCode == HttpStatusCode.OK)
                {
                    content           = resp.Content.ReadAsStringAsync().Result;
                    secret            = JsonConvert.DeserializeObject <SecretPayload>(content);
                    readKeyIntoString = secret.value;
                }
                keyModel    = JsonConvert.DeserializeObject <KeyModel>(readKeyIntoString);
                securityKey = new ECDsaSecurityKey(CryptoECDsa.ConvertToECDsaByBase58CngPublicKey(keyModel.Key, CngAlgorithm.ECDsaP256));
                break;

            default:
                resp = azure.GetValueBySecretName(config["Jwt:Key:HS256:SymmetricKeyJson"]).Result;
                if (resp.StatusCode == HttpStatusCode.OK)
                {
                    content           = resp.Content.ReadAsStringAsync().Result;
                    secret            = JsonConvert.DeserializeObject <SecretPayload>(content);
                    readKeyIntoString = secret.value;
                }
                keyModel    = JsonConvert.DeserializeObject <KeyModel>(readKeyIntoString);
                securityKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(keyModel.Key));
                break;
            }

            return(securityKey);
        }
Example #2
0
        public static SigningCredentials CreateSigningCredentials(Algorithm alg, IConfiguration config, Azure azure)
        {
            SigningCredentials creds;
            string             readKeyIntoString = string.Empty;
            var keyModel = new KeyModel();
            HttpResponseMessage resp;
            var           content = string.Empty;
            SecretPayload secret;

            switch (alg)
            {
            case Algorithm.HS256:
                resp = azure.GetValueBySecretName(config["Jwt:Key:HS256:SymmetricKeyJson"]).Result;
                if (resp.StatusCode == HttpStatusCode.OK)
                {
                    content           = resp.Content.ReadAsStringAsync().Result;
                    secret            = JsonConvert.DeserializeObject <SecretPayload>(content);
                    readKeyIntoString = secret.value;
                }
                keyModel = JsonConvert.DeserializeObject <KeyModel>(readKeyIntoString);
                var hs256SymmetricKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(keyModel.Key));
                creds = new SigningCredentials(hs256SymmetricKey, SecurityAlgorithms.HmacSha256);
                break;

            case Algorithm.RS256:
                RSA privateRsa = RSA.Create();

                resp = azure.GetValueBySecretName(config["Jwt:Key:RS256:PrivateKeyXml"]).Result;
                if (resp.StatusCode == HttpStatusCode.OK)
                {
                    content           = resp.Content.ReadAsStringAsync().Result;
                    secret            = JsonConvert.DeserializeObject <SecretPayload>(content);
                    readKeyIntoString = secret.value;
                }
                privateRsa.fromXmlString(readKeyIntoString);
                var privateKeyRsa = new RsaSecurityKey(privateRsa);
                creds = new SigningCredentials(privateKeyRsa, SecurityAlgorithms.RsaSha256);
                break;

            case Algorithm.ES256:
                resp = azure.GetValueBySecretName(config["Jwt:Key:ES256:PrivateKeyJson"]).Result;
                if (resp.StatusCode == HttpStatusCode.OK)
                {
                    content           = resp.Content.ReadAsStringAsync().Result;
                    secret            = JsonConvert.DeserializeObject <SecretPayload>(content);
                    readKeyIntoString = secret.value;
                }
                keyModel = JsonConvert.DeserializeObject <KeyModel>(readKeyIntoString);
                var privateKeyECDsa = CryptoECDsa.ConvertToECDsaByBase58CngPrivateKey(keyModel.Key, CngAlgorithm.ECDsaP256);
                creds = new SigningCredentials(new ECDsaSecurityKey(privateKeyECDsa), SecurityAlgorithms.EcdsaSha256);
                break;

            default:
                resp = azure.GetValueBySecretName(config["Jwt:Key:HS256:SymmetricKeyJson"]).Result;
                if (resp.StatusCode == HttpStatusCode.OK)
                {
                    content           = resp.Content.ReadAsStringAsync().Result;
                    secret            = JsonConvert.DeserializeObject <SecretPayload>(content);
                    readKeyIntoString = secret.value;
                }
                keyModel = JsonConvert.DeserializeObject <KeyModel>(readKeyIntoString);
                var hs256Key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(keyModel.Key));
                creds = new SigningCredentials(hs256Key, SecurityAlgorithms.HmacSha256);
                break;
            }

            return(creds);
        }