diff options
Diffstat (limited to 'src/Statics.cs')
| -rw-r--r-- | src/Statics.cs | 15 |
1 files changed, 10 insertions, 5 deletions
diff --git a/src/Statics.cs b/src/Statics.cs index 0978abf..b9d105a 100644 --- a/src/Statics.cs +++ b/src/Statics.cs @@ -90,6 +90,13 @@ namespace PkiAuthenticator string? uid = CliArgs.GetArgument("-u"); uid ??= CliArgs.GetArgument("--user"); + string? dataToSign = null; + if (CliArgs.HasArgument("--sign")) + { + Log.Information("Enter the data to sign: "); + dataToSign = Console.ReadLine(); + } + HashAlg digest; //Init the jwt header @@ -133,17 +140,15 @@ namespace PkiAuthenticator { //Default uid is the subjet name uid ??= cert.SubjectName.Name.AsSpan().SliceAfterParam("=").ToString(); - - //Get random nonce for entropy - string nonce = RandomHash.GetRandomBase32(16); - + jwt.InitPayloadClaim() .AddClaim("sub", uid) - .AddClaim("n", nonce) + .AddClaim("n", RandomHash.GetRandomBase32(16)) .AddClaim("iat", DateTimeOffset.UtcNow.ToUnixTimeSeconds()) //Keyid is the hex sha1 of the certificate .AddClaim("keyid", Convert.ToHexString(cert.GetCertHash(HashAlgorithmName.SHA1))) .AddClaim("serial", cert.SerialNumber) + .AddClaim("data", dataToSign!) .CommitClaims(); } |