gpg/skeybase/src/main/scala/com/github/jodersky/skeybase/verifiers/WebsiteFileVerifier.scala


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

package com.github.jodersky.skeybase
package verifiers

import scala.concurrent.Future
import Verifier.withRedirects
import akka.actor.ActorSystem
import openpgp.Backend
import spray.client.pipelining.Get
import spray.client.pipelining.WithTransformerConcatenation
import spray.client.pipelining.sendReceive
import spray.client.pipelining.sendReceive$default$3
import spray.client.pipelining.unmarshal
import spray.httpx.SprayJsonSupport.sprayJsonUnmarshaller
import spray.json.DefaultJsonProtocol

class WebsiteFileVerifier(backend: Backend) extends Verifier {
  import Verifier._

  def verify(fingerprint: String, proof: Proof)(implicit sys: ActorSystem) = {
    import sys.dispatcher

    val pipeline = withRedirects(sendReceive) ~> finalHost(proof.nametag) ~> unmarshal[String]

    val service = Service(
      name = None,
      username = None,
      hostname = Some(proof.nametag),
      domain = None)

    for (
      content <- pipeline(Get(proof.proofUrl));
      signed <- extractSignedMessage(content);
      clear <- backend.verifySignature(signed, fingerprint);
      verified <- verifyOwnershipStatement(clear, service)
    ) yield {
      proof
    }
  }

}