Skip to content

A server that can read Passulo tokens, verify signatures and store public keys

Notifications You must be signed in to change notification settings

passulo/Passulo-Server

Repository files navigation

Passulo Server

  • reads Passulo tokens and displays them for browsers
  • stores public keys
  • validates token-signatures
  • provides an API for programmatic access

Available Routes

  • / says hello
  • /.well-known/apple-app-site-association returns the association to the Passulo iOS App
  • /?code=<base64 encoded token>&v=1&sig=<base64 encoded signature>&kid=<keyid> parses and verifies the token
  • /v1/ provides a json-api for programmatic access:
    • /v1/keys lists all available keys
    • /v1/key/<public-key-id> returns the Public Key (base64 encoded) for the given KeyID
    • /v1/allowed-associations-for-key-id/<public-key-id> returns names of the associations this key is allowed to sign

Public Deployment

For the public Passulo instance, this server is deployed at app.passulo.com.

Build

To build, run

sbt docker:stage
docker build . -t ghcr.io/passulo/passulo-server:latest --platform linux/amd64
docker push ghcr.io/passulo/passulo-server:latest

Docker image at https://github.com/orgs/passulo/packages/container/package/passulo-server

Docs & more

See passulo.com for more information.

About

A server that can read Passulo tokens, verify signatures and store public keys

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages