89 lines
3.3 KiB
TypeScript
89 lines
3.3 KiB
TypeScript
|
import { OIDCProvider } from '../src';
|
|||
|
|
import type { OIDCProviderConfig } from '../src/types';
|
|||
|
|
|
|||
|
|
// 示例：使用RS256算法自动生成密钥对
|
|||
|
|
const configWithRS256: OIDCProviderConfig = {
|
|||
|
|
issuer: 'https://your-auth-server.com',
|
|||
|
|
signingKey: 'temporary-key', // 这个字符串会被自动生成的RSA密钥对替代
|
|||
|
|
signingAlgorithm: 'RS256', // 指定使用RSA算法
|
|||
|
|
storage: {} as any, // 这里应该是真实的存储适配器
|
|||
|
|
findUser: async (userId: string) => null,
|
|||
|
|
findClient: async (clientId: string) => null,
|
|||
|
|
authConfig: {
|
|||
|
|
passwordValidator: async (username: string, password: string) => null,
|
|||
|
|
},
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
// 示例：使用ES256算法自动生成密钥对
|
|||
|
|
const configWithES256: OIDCProviderConfig = {
|
|||
|
|
issuer: 'https://your-auth-server.com',
|
|||
|
|
signingKey: 'temporary-key', // 这个字符串会被自动生成的ECDSA密钥对替代
|
|||
|
|
signingAlgorithm: 'ES256', // 指定使用ECDSA算法
|
|||
|
|
storage: {} as any,
|
|||
|
|
findUser: async (userId: string) => null,
|
|||
|
|
findClient: async (clientId: string) => null,
|
|||
|
|
authConfig: {
|
|||
|
|
passwordValidator: async (username: string, password: string) => null,
|
|||
|
|
},
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
// 示例：使用HS256算法（不会自动生成密钥对）
|
|||
|
|
const configWithHS256: OIDCProviderConfig = {
|
|||
|
|
issuer: 'https://your-auth-server.com',
|
|||
|
|
signingKey: 'your-secret-key', // 对于HMAC，直接使用字符串密钥
|
|||
|
|
signingAlgorithm: 'HS256',
|
|||
|
|
storage: {} as any,
|
|||
|
|
findUser: async (userId: string) => null,
|
|||
|
|
findClient: async (clientId: string) => null,
|
|||
|
|
authConfig: {
|
|||
|
|
passwordValidator: async (username: string, password: string) => null,
|
|||
|
|
},
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
// 使用示例
|
|||
|
|
async function demonstrateAutoKeyGeneration() {
|
|||
|
|
console.log('=== 自动密钥生成示例 ===\n');
|
|||
|
|
|
|||
|
|
// RS256 示例
|
|||
|
|
console.log('1. 创建使用RS256算法的Provider:');
|
|||
|
|
const providerRS256 = new OIDCProvider(configWithRS256);
|
|||
|
|
|
|||
|
|
// 第一次调用会触发RSA密钥对生成
|
|||
|
|
console.log('获取JWKS (会自动生成RSA密钥对):');
|
|||
|
|
const jwksRS256 = await providerRS256.getJWKS();
|
|||
|
|
console.log('RSA JWKS keys数量:', jwksRS256.keys.length);
|
|||
|
|
console.log('RSA 密钥类型:', jwksRS256.keys[0]?.kty);
|
|||
|
|
console.log('RSA 算法:', jwksRS256.keys[0]?.alg);
|
|||
|
|
console.log('');
|
|||
|
|
|
|||
|
|
// ES256 示例
|
|||
|
|
console.log('2. 创建使用ES256算法的Provider:');
|
|||
|
|
const providerES256 = new OIDCProvider(configWithES256);
|
|||
|
|
|
|||
|
|
// 第一次调用会触发ECDSA密钥对生成
|
|||
|
|
console.log('获取JWKS (会自动生成ECDSA密钥对):');
|
|||
|
|
const jwksES256 = await providerES256.getJWKS();
|
|||
|
|
console.log('ECDSA JWKS keys数量:', jwksES256.keys.length);
|
|||
|
|
console.log('ECDSA 密钥类型:', jwksES256.keys[0]?.kty);
|
|||
|
|
console.log('ECDSA 算法:', jwksES256.keys[0]?.alg);
|
|||
|
|
console.log('');
|
|||
|
|
|
|||
|
|
// HS256 示例
|
|||
|
|
console.log('3. 创建使用HS256算法的Provider:');
|
|||
|
|
const providerHS256 = new OIDCProvider(configWithHS256);
|
|||
|
|
|
|||
|
|
// HS256不会生成JWKS
|
|||
|
|
console.log('获取JWKS (HS256不暴露密钥):');
|
|||
|
|
const jwksHS256 = await providerHS256.getJWKS();
|
|||
|
|
console.log('HS256 JWKS keys数量:', jwksHS256.keys.length);
|
|||
|
|
console.log('');
|
|||
|
|
|
|||
|
|
console.log('=== 示例完成 ===');
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 如果直接运行此文件
|
|||
|
|
if (require.main === module) {
|
|||
|
|
demonstrateAutoKeyGeneration().catch(console.error);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
export { demonstrateAutoKeyGeneration };
|