Give json encoding for nonce

flyio/caveats.go

@@ -286,6 +286,7 @@ func (r Role) String() string {
 			combined |= namedRole
 
 			if combined == r {
+				slices.Sort(names) // for consistency in tests
 				return strings.Join(names, "+")
 			}
 		}

flyio/caveats_test.go

@@ -136,7 +136,7 @@ func TestAllowedRoles(t *testing.T) {
 func TestRole(t *testing.T) {
 	assert.Equal(t, "admin", RoleAdmin.String())
 	assert.Equal(t, "member", RoleMember.String())
-	assert.Equal(t, "member+billing_manager", (RoleMember | RoleBillingManager).String())
+	assert.Equal(t, "billing_manager+member", (RoleMember | RoleBillingManager).String())
 
 	assert.True(t, RoleAdmin.HasAllRoles(RoleAdmin))
 	assert.True(t, RoleAdmin.HasAllRoles(RoleMember))

macaroon_test.go

@@ -2,6 +2,7 @@ package macaroon
 
 import (
 	"bytes"
+	"encoding/json"
 	"errors"
 	"fmt"
 	"math/rand"
@@ -683,6 +684,27 @@ func TestDecodeNonce(t *testing.T) {
 	assert.Equal(t, m.Nonce, n)
 }
 
+func TestNonceJSON(t *testing.T) {
+	n1 := newNonce([]byte{1, 2, 3}, false)
+	n2 := newNonce([]byte{1, 2, 3}, true)
+	n3 := n1
+	n3.version = nonceV0
+	n4 := n1
+	n4.version = nonceV0
+
+	for _, n := range []Nonce{n1, n2, n3, n4} {
+		assert.NoError(t, msgpack.Unmarshal(n.MustEncode(), &n))
+
+		j, err := n.MarshalJSON()
+		assert.NoError(t, err)
+
+		var d Nonce
+		assert.NoError(t, json.Unmarshal(j, &d))
+
+		assert.Equal(t, n, d)
+	}
+}
+
 func dischargeMacaroon(ka EncryptionKey, location string, encodedMacaroon []byte) (bool, []Caveat, *Macaroon, error) {
 	tickets, err := TicketsForThirdParty(encodedMacaroon, location)
 	if err != nil {

nonce.go

@@ -1,6 +1,7 @@
 package macaroon
 
 import (
+	"encoding/json"
 	"fmt"
 
 	"github.com/google/uuid"
@@ -112,6 +113,24 @@ func (n Nonce) MustEncode() []byte {
 	return b
 }
 
+func (n Nonce) MarshalJSON() ([]byte, error) {
+	raw, err := msgpack.Marshal(&n)
+	if err != nil {
+		return nil, err
+	}
+
+	return json.Marshal(raw)
+}
+
+func (c *Nonce) UnmarshalJSON(b []byte) error {
+	var raw []byte
+	if err := json.Unmarshal(b, &raw); err != nil {
+		return err
+	}
+
+	return msgpack.Unmarshal(raw, c)
+}
+
 // newNonce creates a nonce from a key-id, where the key-id
 // is any opaque string; the resulting nonce has a bunch of random
 // goo in it to goo up the nonce. A sane key-id might be a user-id