Add an auth service for minting and decoding JWTs

src/config/__init__.py

@@ -4,6 +4,7 @@ from typing import Any
 
 from .logging import Logging
 from .email import Email
+from .auth import Auth
 from .database import Database
 from .parse import assert_key_of_type, parse_nested_config
 
@@ -15,19 +16,25 @@ class Config:
     logging: Logging
     email: Email
     database: Database
+    auth: Auth
 
     @classmethod
     def from_dict(cls, config: dict[str, Any]) -> 'Config':
-        assert_key_of_type(config, 'logging', dict)
-        assert_key_of_type(config, 'email', dict)
         assert_key_of_type(config, 'host', str)
         assert_key_of_type(config, 'port', int)
+
         log_config = parse_nested_config(config, 'logging', Logging.from_dict)
         email_config = parse_nested_config(config, 'email', Email.from_dict)
         db_config = parse_nested_config(config, 'database', Database.from_dict)
+        auth_config = parse_nested_config(config, 'auth', Auth.from_dict)
 
         return Config(
-            host=config['host'], port=config['port'], email=email_config, logging=log_config, database=db_config
+            host=config['host'],
+            port=config['port'],
+            email=email_config,
+            logging=log_config,
+            database=db_config,
+            auth=auth_config,
         )
 
 

src/config/auth.py

@@ -0,0 +1,16 @@
+from base64 import b64decode
+from typing import Any
+from src.config.parse import assert_key_of_type
+from src.utils.secret import SecretBox
+from dataclasses import dataclass
+
+
+@dataclass
+class Auth:
+    ed25519_private_key: SecretBox[bytes]
+
+    @classmethod
+    def from_dict(cls, config: dict[str, Any]) -> 'Auth':
+        assert_key_of_type(config, 'ed25519_private_key', str)
+        private_key = b64decode(config['ed25519_private_key'])
+        return Auth(ed25519_private_key=SecretBox(private_key))