module JWT::Algos::Ps

def require_openssl!
  if Object.const_defined?('OpenSSL')
    if ::Gem::Version.new(OpenSSL::VERSION) < ::Gem::Version.new('2.1')
      raise JWT::RequiredDependencyError, "You currently have OpenSSL #{OpenSSL::VERSION}. PS support requires >= 2.1"
    end
  else
    raise JWT::RequiredDependencyError, 'PS signing requires OpenSSL +2.1'
  end
end

def sign(to_sign)
  require_openssl!
  algorithm, msg, key = to_sign.values
  key_class = key.class
  raise EncodeError, "The given key is a #{key_class}. It has to be an OpenSSL::PKey::RSA instance." if key_class == String
  translated_algorithm = algorithm.sub('PS', 'sha')
  key.sign_pss(translated_algorithm, msg, salt_length: :digest, mgf1_hash: translated_algorithm)
end

def verify(to_verify)
  require_openssl!
  SecurityUtils.verify_ps(to_verify.algorithm, to_verify.public_key, to_verify.signing_input, to_verify.signature)
end