RotateSecretCrypto.java

package act.crypto;

/*-
 * #%L
 * ACT Framework
 * %%
 * Copyright (C) 2014 - 2018 ActFramework
 * %%
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 * 
 *      http://www.apache.org/licenses/LICENSE-2.0
 * 
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 * #L%
 */

import act.session.RotationSecretProvider;
import org.osgl.util.S;

import javax.inject.Inject;
import javax.inject.Singleton;

@Singleton
public class RotateSecretCrypto extends AppCrypto {

    private RotationSecretProvider secretProvider;
    private boolean rotationEnabled;

    @Inject
    public RotateSecretCrypto(RotationSecretProvider secretProvider) {
        super(secretProvider.rawSecret());
        this.rotationEnabled = secretProvider.isRotateEnabled();
        this.secretProvider = secretProvider;
    }

    @Override
    public String sign(String message) {
        return !rotationEnabled ? super.sign(message) : cur().sign(message);
    }

    public boolean verifySignature(String message, String signature) {
        if (!rotationEnabled) {
            return S.eq(signature, super.sign(message));
        }
        return S.eq(signature, cur().sign(message))
                || S.eq(signature, prev().sign(message))
                || S.eq(signature, next().sign(message));
    }

    @Override
    public char[] passwordHash(char[] password) {
        return super.passwordHash(password);
    }

    @Override
    public String passwordHash(String password) {
        return super.passwordHash(password);
    }

    @Override
    public boolean verifyPassword(String password, String hash) {
        return super.verifyPassword(password, hash);
    }

    @Override
    public boolean verifyPassword(char[] password, String hash) {
        return super.verifyPassword(password, hash);
    }

    @Override
    public boolean verifyPassword(char[] password, char[] hash) {
        return super.verifyPassword(password, hash);
    }

    @Override
    public String encrypt(String message) {
        return !rotationEnabled ? super.encrypt(message) : cur().encrypt(message);
    }

    @Override
    public String decrypt(String message) {
        if (!rotationEnabled) {
            return super.decrypt(message);
        }
        try {
            return cur().decrypt(message);
        } catch (Exception e) {
            try {
                return prev().decrypt(message);
            } catch (Exception e1) {
                return next().decrypt(message);
            }
        }
    }

    private AppCrypto cur() {
        return new AppCrypto(secretProvider.curSecret());
    }

    private AppCrypto prev() {
        return new AppCrypto(secretProvider.lastSecret());
    }

    private AppCrypto next() {
        return new AppCrypto(secretProvider.nextSecret());
    }
}