Send signatures and verify signature of patches file before loading it

src/main/kotlin/app/revanced/api/configuration/routes/PatchesRoute.kt

@@ -1,6 +1,8 @@
 package app.revanced.api.configuration.routes
 
+import app.revanced.api.configuration.installCache
 import app.revanced.api.configuration.installNotarizedRoute
+import app.revanced.api.configuration.schema.APIAssetPublicKeys
 import app.revanced.api.configuration.schema.APIRelease
 import app.revanced.api.configuration.schema.APIReleaseVersion
 import app.revanced.api.configuration.services.PatchesService
@@ -10,6 +12,7 @@ import io.ktor.server.application.*
 import io.ktor.server.plugins.ratelimit.*
 import io.ktor.server.response.*
 import io.ktor.server.routing.*
+import kotlin.time.Duration.Companion.days
 import org.koin.ktor.ext.get as koinGet
 
 internal fun Route.patchesRoute() = route("patches") {
@@ -42,6 +45,18 @@ internal fun Route.patchesRoute() = route("patches") {
             }
         }
     }
+
+    rateLimit(RateLimitName("strong")) {
+        route("keys") {
+            installCache(356.days)
+
+            installPatchesPublicKeyRouteDocumentation()
+
+            get {
+                call.respond(patchesService.publicKeys())
+            }
+        }
+    }
 }
 
 fun Route.installLatestPatchesRouteDocumentation() = installNotarizedRoute {
@@ -88,3 +103,18 @@ fun Route.installLatestPatchesListRouteDocumentation() = installNotarizedRoute {
         }
     }
 }
+
+fun Route.installPatchesPublicKeyRouteDocumentation() = installNotarizedRoute {
+    tags = setOf("Patches")
+
+    get = GetInfo.builder {
+        description("Get the public keys for verifying patches and integrations assets")
+        summary("Get patches and integrations public keys")
+        response {
+            description("The public keys")
+            mediaTypes("application/json")
+            responseCode(HttpStatusCode.OK)
+            responseType<APIAssetPublicKeys>()
+        }
+    }
+}