gpg/skeybase/src/main/scala/com/github/jodersky/skeybase/verification/WebsiteFileVerifier.scala


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

package com.github.jodersky.skeybase
package verification

import scala.concurrent.Future


import Verifier.extractSignedStatement
import Verifier.finalHost
import Verifier.verifyStatement
import Verifier.withRedirects
import akka.actor.ActorSystem
import openpgp.Backend
import spray.client.pipelining.Get
import spray.client.pipelining.WithTransformerConcatenation
import spray.client.pipelining.sendReceive
import spray.client.pipelining.sendReceive$default$3
import spray.client.pipelining.unmarshal
import spray.httpx.SprayJsonSupport.sprayJsonUnmarshaller
import spray.json.DefaultJsonProtocol

class WebsiteFileVerifier(backend: Backend) extends Verifier {
  import Verifier._

  def verify(fingerprint: String, proof: Proof)(implicit sys: ActorSystem) = {
    import sys.dispatcher

    val pipeline = withRedirects(sendReceive) ~> finalHost(proof.nametag).tupled ~> unmarshal[String]
    for (
      content <- pipeline(Get(proof.proofUrl));
      signed <- extractSignedStatement(content);
      clear <- backend.verifySignature(signed, fingerprint);
      verified <- verifyStatement(clear, "github", proof.nametag)
    ) yield {
      proof
    }
  }

}