encrypt

type AesJOSEEncryption struct {
	// contains filtered or unexported fields
}

type JOSEDecrypter interface {
	Decrypt(string) ([]byte, error)
}

type JOSEEncrypter interface {
	Encrypt([]byte) (string, error)
}

type JOSEEncryptionProvider interface {
	JOSEEncrypter
	JOSEDecrypter
}

type JOSEKeyFileSource struct {
	// KeysFilePath maintains the fil path that maintains the keys for encryption
	// Keys-file needs to maintain keys in this format {"activeKeyId":<>, keys:[{"kty":<>,"kid":<>,"k":<>,"alg":<>}]]}
	KeysFilePath string
	// JwkSet maintains all the keys configuration from key-file
	// and in a format that allows us to use jose's library functions effectively
	JwkSet JWKSet
}

type JOSEKeySource interface {
	// Init function should be called once to initialize based on the provided config
	// This is a good place to add any implementation specific validation
	Init() error
	// GetActiveKey returns the active key used for encryption
	GetActiveKey() jose.JSONWebKey
	// Load return the key looked up by keyID. This is particularly useful during decryption
	Load(keyID string) (jose.JSONWebKey, error)
}

type JWKSet struct {
	ActiveKeyID string `json:"activeKeyId"`
	jose.JSONWebKeySet
}

type Key struct {
	Kty string `json:"kty"`
	Kid string `json:"kid"`
	K   string `json:"k"`
	Alg string `json:"alg"`
}

type Keys struct {
	ActiveKeyId string `json:"activeKeyId"`
	Keys        []Key  `json:"keys"`
}