feat: rename gateway spec to proxy

internal/agent/controller/app/controller.go

@@ -11,6 +11,7 @@ import (
 	"forge.cadoles.com/Cadoles/emissary/internal/spec/app"
 	"forge.cadoles.com/arcad/edge/pkg/bundle"
 	"forge.cadoles.com/arcad/edge/pkg/storage/sqlite"
+	"github.com/lestrrat-go/jwx/v2/jwk"
 	"github.com/mitchellh/hashstructure/v2"
 	"github.com/pkg/errors"
 	"gitlab.com/wpetit/goweb/logger"
@@ -96,18 +97,32 @@ func (c *Controller) updateApps(ctx context.Context, spec *app.Spec) {
 		}
 	}
 
+	var (
+		key jwk.Key
+		err error
+	)
+
+	if spec.Auth != nil {
+		key, err = jwk.FromRaw(spec.Auth.Key)
+		if err != nil {
+			logger.Error(ctx, "could not parse authentication key", logger.E(errors.WithStack(err)))
+
+			return
+		}
+	}
+
 	// (Re)start apps
 	for appID, appSpec := range spec.Apps {
 		appCtx := logger.With(ctx, logger.F("appID", appID))
 
-		if err := c.updateApp(ctx, appID, appSpec); err != nil {
+		if err := c.updateApp(ctx, appID, appSpec, key); err != nil {
 			logger.Error(appCtx, "could not update app", logger.E(errors.WithStack(err)))
 			continue
 		}
 	}
 }
 
-func (c *Controller) updateApp(ctx context.Context, appID string, appSpec app.AppEntry) (err error) {
+func (c *Controller) updateApp(ctx context.Context, appID string, appSpec app.AppEntry, key jwk.Key) (err error) {
 	newAppSpecHash, err := hashstructure.Hash(appSpec, hashstructure.FormatV2, nil)
 	if err != nil {
 		return errors.WithStack(err)
@@ -150,7 +165,7 @@ func (c *Controller) updateApp(ctx context.Context, appID string, appSpec app.Ap
 		}
 
 		entry = &serverEntry{
-			Server:   NewServer(bundle, db),
+			Server:   NewServer(bundle, db, key),
 			SpecHash: 0,
 		}
 

internal/agent/controller/app/server.go

@@ -22,6 +22,7 @@ import (
 	"github.com/dop251/goja"
 	"github.com/go-chi/chi/middleware"
 	"github.com/go-chi/chi/v5"
+	"github.com/lestrrat-go/jwx/v2/jwk"
 	"github.com/pkg/errors"
 )
 
@@ -30,6 +31,7 @@ type Server struct {
 	db          *sql.DB
 	server      *http.Server
 	serverMutex sync.RWMutex
+	key         jwk.Key
 }
 
 func (s *Server) Start(ctx context.Context, addr string) (err error) {
@@ -129,7 +131,9 @@ func (s *Server) getAppModules(bus bus.Bus, ds storage.DocumentStore, bs storage
 		module.StoreModuleFactory(ds),
 		module.BlobModuleFactory(bus, bs),
 		module.Extends(
-			auth.ModuleFactory(),
+			auth.ModuleFactory(
+				auth.WithJWT(s.getJWTKeySet),
+			),
 			func(o *goja.Object) {
 				if err := o.Set("CLAIM_ROLE", "role"); err != nil {
 					panic(errors.New("could not set 'CLAIM_ROLE' property"))
@@ -143,9 +147,20 @@ func (s *Server) getAppModules(bus bus.Bus, ds storage.DocumentStore, bs storage
 	}
 }
 
-func NewServer(bundle bundle.Bundle, db *sql.DB) *Server {
+func (s *Server) getJWTKeySet() (jwk.Set, error) {
+	set := jwk.NewSet()
+
+	if err := set.AddKey(s.key); err != nil {
+		return nil, errors.WithStack(err)
+	}
+
+	return set, nil
+}
+
+func NewServer(bundle bundle.Bundle, db *sql.DB, key jwk.Key) *Server {
 	return &Server{
 		bundle: bundle,
 		db:     db,
+		key:    key,
 	}
 }