Improve verification routine to support offline mode.

Author: bbockelm

src/verify.cpp

@@ -1,13 +1,117 @@
-#include <iostream>
 
 #include "scitokens.h"
 
-int main(int argc, const char** argv) {
+#include <fstream>
+#include <iostream>
+#include <getopt.h>
+
+namespace {
+
+const char usage[] = \
+"\n"
+"Syntax: %s [--cred cred_file] TOKEN\n"
+"\n"
+" Options\n"
+"    -h | --help                  Display usage\n"
+"    -c | --cred     <cred_file>  File containing the signing credential.\n"
+"    -i | --issuer      <issuer>  Issuer of the token to verify.\n"
+"    -K | --keyid          <kid>  Name of the token key.\n"
+"    -p | --profile    <profile>  Profile to enforce (wlcg, scitokens1, scitokens2).\n"
+"\n";
+
+const struct option long_options[] =
+{
+    {"help",           no_argument, NULL, 'h'},
+    {"cred",     required_argument, NULL, 'c'},
+    {"issuer",   required_argument, NULL, 'i'},
+    {"keyid",    required_argument, NULL, 'K'},
+    {"profile",  required_argument, NULL, 'p'},
+    {0, 0, 0, 0}
+};
+
+const char short_options[] = "hc:i:K:p:";
+
+std::string g_cred, g_issuer, g_keyid, g_profile;
+
+int init_arguments(int argc, char * const argv[])
+{
+    int arg;
+    while((arg = getopt_long(argc, argv, short_options, long_options, nullptr)) != -1) {
+        switch (arg)
+        {
+        case 'h':
+            printf(usage, argv[0]);
+            exit(0);
+            break;
+        case 'c':
+            g_cred = optarg;
+            break;
+        case 'i':
+            g_issuer = optarg;
+            break;
+        case 'K':
+            g_keyid = optarg;
+            break;
+        case 'p':
+            g_profile = optarg;
+            break;
+        default:
+            fprintf(stderr, usage, argv[0]);
+            exit(1);
+            break;
+        }
+    }
+
+    if (optind < argc - 1) {
+        fprintf(stderr, "%s: invalid option -- %s\n", argv[0], argv[optind]);
+        fprintf(stderr, usage, argv[0]);
+        exit(1);
+    }
+
+    if (optind == argc) {
+        fprintf(stderr, "%s: Must provide a token as a requirement\n", argv[0]);
+        fprintf(stderr, usage, argv[0]);
+        exit(1);
+    }
+
+    if ((!g_cred.empty() || !g_issuer.empty() || !g_keyid.empty()) &&
+        (g_cred.empty() || g_issuer.empty() || g_keyid.empty()))
+    {
+        fprintf(stderr, "%s: If --cred, --keyid, or --issuer are set, then all must be set.\n", argv[0]);
+        fprintf(stderr, usage, argv[0]);
+        exit(1);
+    }
+
+    return 0;
+}
+
+}
+
+int main(int argc, char* const* argv) {
     if (argc < 2) {
-        std::cerr << "Usage: " << argv[0] << " (TOKEN)" << std::endl;
+        fprintf(stderr, "%s: Insufficient arguments; must at least provide a token.\n", argv[0]);
+        fprintf(stderr, usage, argv[0]);
         return 1;
     }
-    std::string token(argv[1]);
+    if (init_arguments(argc, argv)) {return 1;}
+
+    std::string token(argv[argc-1]);
+
+    if (!g_issuer.empty()) {
+        char *err_msg;
+
+        std::ifstream pub_ifs(g_cred);
+        std::string public_contents( (std::istreambuf_iterator<char>(pub_ifs)),
+                              (std::istreambuf_iterator<char>())
+                             );
+
+        auto rv = scitoken_store_public_ec_key(g_issuer.c_str(), g_keyid.c_str(), public_contents.c_str(), &err_msg);
+        if (rv) {
+            fprintf(stderr, "%s: %s\n", argv[0], err_msg);
+            free(err_msg);
+            return 1;
+        }
+    }
 
     SciToken scitoken;
     char *err_msg = nullptr;
@@ -16,6 +120,6 @@ int main(int argc, const char** argv) {
         return 1;
     }
     std::cout << "Token deserialization successful." << std::endl;
+
     return 0;
 }
-