AeadCookieCipher.h

Go to the documentation of this file.

/*
 *  Copyright (c) 2018-present, Facebook, Inc.
 *  All rights reserved.
 *
 *  This source code is licensed under the BSD-style license found in the
 *  LICENSE file in the root directory of this source tree.
 */

#include <fizz/server/AeadTokenCipher.h>
#include <fizz/server/CookieCipher.h>
#include <fizz/server/FizzServerContext.h>

namespace fizz {
namespace server {

struct AppToken {
  Buf token;
};

struct StatelessHelloRetryRequest {
  Buf data;
};

template <typename AeadType, typename HkdfType>
class AeadCookieCipher : public CookieCipher {
 public:
  AeadCookieCipher()
      : tokenCipher_(std::vector<std::string>({"Fizz Cookie Cipher v1"})) {}

  bool setCookieSecrets(const std::vector<folly::ByteRange>& cookieSecrets) {
    return tokenCipher_.setSecrets(cookieSecrets);
  }

  void setContext(const FizzServerContext* context) {
    context_ = context;
  }

  boost::variant<AppToken, StatelessHelloRetryRequest> getTokenOrRetry(
      Buf clientHello,
      Buf appToken) const;

  folly::Optional<CookieState> decrypt(Buf cookie) const override;

 private:
  Buf getStatelessResponse(const ClientHello& chlo, Buf appToken) const;

  AeadTokenCipher<AeadType, HkdfType> tokenCipher_;

  const FizzServerContext* context_ = nullptr;
};
} // namespace server
} // namespace fizz

#include <fizz/server/AeadCookieCipher-inl.h>