1 /*
2 *
3 * Copyright 2015 gRPC authors.
4 *
5 * Licensed under the Apache License, Version 2.0 (the "License");
6 * you may not use this file except in compliance with the License.
7 * You may obtain a copy of the License at
8 *
9 * http://www.apache.org/licenses/LICENSE-2.0
10 *
11 * Unless required by applicable law or agreed to in writing, software
12 * distributed under the License is distributed on an "AS IS" BASIS,
13 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14 * See the License for the specific language governing permissions and
15 * limitations under the License.
16 *
17 */
18
19 #include <stdio.h>
20 #include <string.h>
21
22 #include "src/core/lib/iomgr/load_file.h"
23 #include "src/core/lib/security/credentials/jwt/jwt_credentials.h"
24
25 #include <grpc/slice.h>
26 #include <grpc/support/alloc.h>
27 #include <grpc/support/log.h>
28
29 #include "test/core/util/cmdline.h"
30
create_jwt(const char * json_key_file_path,const char * service_url,const char * scope)31 void create_jwt(const char* json_key_file_path, const char* service_url,
32 const char* scope) {
33 grpc_auth_json_key key;
34 char* jwt;
35 grpc_slice json_key_data;
36 GPR_ASSERT(GRPC_LOG_IF_ERROR(
37 "load_file", grpc_load_file(json_key_file_path, 1, &json_key_data)));
38 key = grpc_auth_json_key_create_from_string(
39 reinterpret_cast<const char*> GRPC_SLICE_START_PTR(json_key_data));
40 grpc_slice_unref(json_key_data);
41 if (!grpc_auth_json_key_is_valid(&key)) {
42 fprintf(stderr, "Could not parse json key.\n");
43 fflush(stderr);
44 exit(1);
45 }
46 jwt = grpc_jwt_encode_and_sign(
47 &key, service_url == nullptr ? GRPC_JWT_OAUTH2_AUDIENCE : service_url,
48 grpc_max_auth_token_lifetime(), scope);
49 grpc_auth_json_key_destruct(&key);
50 if (jwt == nullptr) {
51 fprintf(stderr, "Could not create JWT.\n");
52 fflush(stderr);
53 exit(1);
54 }
55 fprintf(stdout, "%s\n", jwt);
56 gpr_free(jwt);
57 }
58
main(int argc,char ** argv)59 int main(int argc, char** argv) {
60 const char* scope = nullptr;
61 const char* json_key_file_path = nullptr;
62 const char* service_url = nullptr;
63 grpc_init();
64 gpr_cmdline* cl = gpr_cmdline_create("create_jwt");
65 gpr_cmdline_add_string(cl, "json_key", "File path of the json key.",
66 &json_key_file_path);
67 gpr_cmdline_add_string(cl, "scope",
68 "OPTIONAL Space delimited permissions. Mutually "
69 "exclusive with service_url",
70 &scope);
71 gpr_cmdline_add_string(cl, "service_url",
72 "OPTIONAL service URL. Mutually exclusive with scope.",
73 &service_url);
74 gpr_cmdline_parse(cl, argc, argv);
75
76 if (json_key_file_path == nullptr) {
77 fprintf(stderr, "Missing --json_key option.\n");
78 fflush(stderr);
79 exit(1);
80 }
81 if (scope != nullptr) {
82 if (service_url != nullptr) {
83 fprintf(stderr,
84 "Options --scope and --service_url are mutually exclusive.\n");
85 fflush(stderr);
86 exit(1);
87 }
88 } else if (service_url == nullptr) {
89 fprintf(stderr, "Need one of --service_url or --scope options.\n");
90 fflush(stderr);
91 exit(1);
92 }
93
94 create_jwt(json_key_file_path, service_url, scope);
95
96 gpr_cmdline_destroy(cl);
97 grpc_shutdown();
98 return 0;
99 }
100