From 54ee1b35946b587e85c8995ed10b9d5eecab802d Mon Sep 17 00:00:00 2001
From: jesopo
Date: Sun, 15 Sep 2019 10:43:46 +0100
Subject: re-merge fediverse an fediverse_server, so they can share utils

---
 modules/fediverse/security.py | 36 ++++++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)
 create mode 100644 modules/fediverse/security.py

(limited to 'modules/fediverse/security.py')

diff --git a/modules/fediverse/security.py b/modules/fediverse/security.py
new file mode 100644
index 00000000..00fe8264
--- /dev/null
+++ b/modules/fediverse/security.py
@@ -0,0 +1,36 @@
+import base64, typing
+from cryptography.hazmat.primitives import hashes, serialization
+from cryptography.hazmat.primitives.asymmetric import padding, rsa
+from cryptography.hazmat.backends import default_backend
+
+SIGNATURE_FORMAT = (
+    "keyId=\"%s\",headers=\"%s\",signature=\"%s\",algorithm=\"rsa-sha256\"")
+
+
+def _private_key(key_filename: str) -> rsa.RSAPrivateKey:
+    with open(key_filename) as key_file:
+        return serialization.load_pem_private_key(
+            key_file.read(), password=None, backend=default_backend())
+
+class PrivateKey(object):
+    def __init__(self, filename, id):
+        self.key = _private_key(filename)
+        self.id = id
+
+def signature(key: PrivateKey, headers: typing.List[typing.Tuple[str, str]]
+        ) -> str:
+    sign_header_keys = " ".join(h[0] for h in headers)
+
+    sign_string_parts = ["%s: %s" % (k, v) for k, v in headers]
+    sign_string = "\n".join(sign_string_parts)
+
+    signature = key.key.sign(
+        sign_string.encode("utf8"),
+        padding.PSS(
+            mgf=padding.MGF1(hashes.SHA256()),
+            salt_length=padding.PSS.MAX_LENGTH),
+        hashes.SHA256()
+    )
+
+    signature = base64.b64encode(signature).decode("ascii")
+    return SIGNATURE_FORMAT % (key_id, sign_header_keys, signature)
-- 
cgit v1.3.1-10-gc9f91