signer_gmsm2.go

package jwt

import (
    "errors"
    "github.com/golang-jwt/jwt/v4"

    "github.com/deatil/lakego-jwt/jwt/sm2"
)

// SignerGmSM2
func SignerGmSM2(conf IConfig) GmSM2 {
    return GmSM2{
        Config: conf,
        SigningMethod: sm2.SigningMethodGmSM2,
    }
}

func init() {
    // 国密 SM2
    AddSigner("GmSM2", func(conf IConfig) ISigner {
        return SignerGmSM2(conf)
    })
}

/**
 * GmSM2
 *
 * @create 2023-2-5
 * @author deatil
 */
type GmSM2 struct {
    // 配置
    Config IConfig

    // 签名
    SigningMethod jwt.SigningMethod
}

// 获取签名
func (this GmSM2) GetSigner() jwt.SigningMethod {
    return this.SigningMethod
}

// 签名密钥
func (this GmSM2) GetSignSecrect() (secret any, err error) {
    // 私钥
    keyByte := this.Config.PrivateKey()
    if len(keyByte) == 0 {
        err = errors.New("GmSM2 PrivateKey empty")
        return
    }

    password := this.Config.PrivateKeyPassword()

    if password != "" {
        secret, err = sm2.ParseSM2PrivateKeyFromPEMWithPassword(keyByte, password)
    } else {
        secret, err = sm2.ParseSM2PrivateKeyFromPEM(keyByte)
    }

    return
}

// 验证密钥
func (this GmSM2) GetVerifySecrect() (secret any, err error) {
    // 公钥
    keyByte := this.Config.PublicKey()
    if len(keyByte) == 0 {
        err = errors.New("GmSM2 PublicKey empty")
        return nil, err
    }

    secret, err = sm2.ParseSM2PublicKeyFromPEM(keyByte)
    return
}