Zero-Trust Authentication Module for Pingoo

Cargo.toml

@@ -75,6 +75,7 @@ wildcard = { workspace = true }
 x509-parser = { workspace = true }
 zeroize = { workspace = true, features = ["simd", "derive"] }
 zstd = { workspace = true }
+urlencoding = { workspace = true }
 
 
 
@@ -141,6 +142,7 @@ wildcard = "0.3"
 x509-parser = "0.18"
 zeroize = "1"
 zstd = "0.13"
+urlencoding = "2.1.3"
 
 
 # countries = { git = "https://github.com/pingooio/stdx-rs", branch = "main" }

Dockerfile

@@ -117,4 +117,4 @@ WORKDIR /home/pingoo
 
 ENTRYPOINT ["/bin/pingoo"]
 
-EXPOSE 80
+EXPOSE 80 443

jwt/jwt.rs

@@ -152,6 +152,10 @@ pub enum Algorithm {
 
     /// ECDSA using P-521 and SHA-512
     ES512,
+
+    /// RSA PKCS#1 v1.5 signature with SHA-256
+    /// Commonly used by OAuth providers (Google, Microsoft, GitHub, etc.)
+    RS256,
 }
 
 #[derive(Debug, Clone)]
@@ -165,6 +169,9 @@ impl Algorithm {
         match self {
             Algorithm::HS512 | Algorithm::EdDSA | Algorithm::ES256 => 64,
             Algorithm::ES512 => 132,
+            // RS256 signature size varies based on key size (256 bytes for 2048-bit keys)
+            // We use max size for 4096-bit keys
+            Algorithm::RS256 => 512,
         }
     }
 }