package(default_visibility = ["//visibility:public"])

licenses(["notice"])

filegroup(
    name = "jwt_signature_keysets",
    srcs = [
        "jwt_signature_private_keyset.json",
        "jwt_signature_public_keyset.json",
    ],
)

cc_binary(
    name = "jwt_sign",
    srcs = ["jwt_sign.cc"],
    deps = [
        "//util",
        "@com_google_absl//absl/flags:flag",
        "@com_google_absl//absl/flags:parse",
        "@com_google_absl//absl/log:check",
        "@tink_cc//:keyset_handle",
        "@tink_cc//jwt:jwt_public_key_sign",
        "@tink_cc//jwt:jwt_signature_config",
        "@tink_cc//jwt:raw_jwt",
        "@tink_cc//util:status",
    ],
)

cc_binary(
    name = "jwt_verify",
    srcs = ["jwt_verify.cc"],
    deps = [
        "//util",
        "@com_google_absl//absl/flags:flag",
        "@com_google_absl//absl/flags:parse",
        "@com_google_absl//absl/log:check",
        "@tink_cc//:keyset_handle",
        "@tink_cc//jwt:jwk_set_converter",
        "@tink_cc//jwt:jwt_public_key_verify",
        "@tink_cc//jwt:jwt_signature_config",
        "@tink_cc//jwt:jwt_validator",
        "@tink_cc//util:status",
    ],
)

cc_binary(
    name = "jwt_generate_public_jwk_set",
    srcs = ["jwt_generate_public_jwk_set.cc"],
    deps = [
        "//util",
        "@com_google_absl//absl/flags:flag",
        "@com_google_absl//absl/flags:parse",
        "@com_google_absl//absl/log:check",
        "@tink_cc//:keyset_handle",
        "@tink_cc//jwt:jwk_set_converter",
        "@tink_cc//jwt:jwt_signature_config",
        "@tink_cc//util:status",
    ],
)

sh_test(
    name = "jwt_signature_cli_test",
    size = "small",
    srcs = ["jwt_signature_cli_test.sh"],
    args = [
        "$(rootpath :jwt_sign)",
        "$(rootpath :jwt_generate_public_jwk_set)",
        "$(rootpath :jwt_verify)",
        "$(rootpaths :jwt_signature_keysets)",
    ],
    data = [
        ":jwt_generate_public_jwk_set",
        ":jwt_sign",
        ":jwt_signature_keysets",
        ":jwt_verify",
    ],
)