master -> develop (#20)

* Squash merge develop into master

* feat: add automated production release workflow

* feat: add Gitflow workflow for syncing branches

* ci: update workflow runner to latest ubuntu version

* feat: enable buf.build publishing on master and develop branches

---------

Co-authored-by: Prad Nukala <prad@sonr.io>

internal/svc/openid.go

@@ -0,0 +1,46 @@
+package svc
+
+import (
+	"fmt"
+
+	"github.com/labstack/echo/v4"
+	oidc "github.com/onsonr/sonr/x/did/types/oidc"
+)
+
+func GrantAuthorization(e echo.Context) error {
+	// Implement authorization endpoint using passkey authentication
+	// Store session data in cache
+	return nil
+}
+
+func GetJWKS(e echo.Context) error {
+	// Implement token endpoint
+	// Use cached session data for validation
+	return nil
+}
+
+func GetToken(e echo.Context) error {
+	// Implement token endpoint
+	// Use cached session data for validation
+	return nil
+}
+
+func GetDiscovery(e echo.Context) error {
+	baseURL := "https://" + e.Request().Host // Ensure this is the correct base URL for your service
+	discoveryDoc := &oidc.DiscoveryDocument{
+		Issuer:                 baseURL,
+		AuthorizationEndpoint:  fmt.Sprintf("%s/auth", baseURL),
+		TokenEndpoint:          fmt.Sprintf("%s/token", baseURL),
+		UserinfoEndpoint:       fmt.Sprintf("%s/userinfo", baseURL),
+		JwksUri:                fmt.Sprintf("%s/jwks", baseURL),
+		RegistrationEndpoint:   fmt.Sprintf("%s/register", baseURL),
+		ScopesSupported:        []string{"openid", "profile", "email", "web3", "sonr"},
+		ResponseTypesSupported: []string{"code"},
+		ResponseModesSupported: []string{"query", "form_post"},
+		GrantTypesSupported:    []string{"authorization_code", "refresh_token"},
+		AcrValuesSupported:     []string{"passkey"},
+		SubjectTypesSupported:  []string{"public"},
+		ClaimsSupported:        []string{"sub", "iss", "name", "email"},
+	}
+	return e.JSON(200, discoveryDoc)
+}

internal/svc/webauth.go

@@ -0,0 +1,43 @@
+package svc
+
+import (
+	"encoding/json"
+	"fmt"
+
+	"github.com/go-webauthn/webauthn/protocol"
+	"github.com/labstack/echo/v4"
+)
+
+func CheckSubjectIsValid(e echo.Context) error {
+	credentialID := e.FormValue("credentialID")
+	return e.JSON(200, credentialID)
+}
+
+func HandleCredentialAssertion(e echo.Context) error {
+	return e.JSON(200, "HandleCredentialAssertion")
+}
+
+func HandleCredentialCreation(e echo.Context) error {
+	// Get the serialized credential data from the form
+	credentialDataJSON := e.FormValue("credentialData")
+
+	// Deserialize the JSON into a temporary struct
+	var ccr protocol.CredentialCreationResponse
+	err := json.Unmarshal([]byte(credentialDataJSON), &ccr)
+	if err != nil {
+		return e.JSON(500, err.Error())
+	}
+	//
+	// // Parse the CredentialCreationResponse
+	// parsedData, err := ccr.Parse()
+	// if err != nil {
+	// 	return e.JSON(500, err.Error())
+	// }
+	//
+	// // Create the Credential
+	// // credential := orm.NewCredential(parsedData, e.Request().Host, "")
+	//
+	// // Set additional fields
+	// credential.Controller = "" // Set this to the appropriate controller value
+	return e.JSON(200, fmt.Sprintf("REGISTER: %s", string(ccr.ID)))
+}