Questions tagged [jose]

JOSE (Javascript Object Signing and Encryption) is a framework intended to provide a method to securely transfer claims (such as authorization information) between parties

JOSE (Javascript Object Signing and Encryption) is a framework intended to provide a method to securely transfer claims (such as authorization information) between parties

The JOSE framework provides a collection of specifications to serve this purpose. A JSON Web Token (JWT) contains claims that can be used to allow a system to apply access control to resources it owns.

One potential use case of the JWT is as the means of authentication and authorization for a system that exposes resources through an OAuth 2.0 model.

Official Website

131 questions
1
vote
1 answer

Jose Encrypter returning nil

I am using JOSESwift. When I use the Encrypter method it returns nil without details of any error. Below is my code sample. Can anyone please help why does the Encrypter method return nil? Intention : I am trying to set wrapping key to my JWE…
Max
  • 5,380
  • 6
  • 42
  • 66
1
vote
1 answer

Unable to decrypt JWE token using github.com/web-token/jwt-framework

Followed the guide on https://github.com/ndi-trusted-data/myinfo-demo-app/blob/master/lib/security/security.js I managed to decrypt the JWE token in node js environment but not php. However with the same implementation in PHP, I am not able to…
1
vote
0 answers

Decrypting a JWE token using JOSE with A256GCM

I'm curious about this and wanted to see if anyone understands it. I am encoding a payload using the jose-jwt nuget in .NET: Jose.JWT.Encode( payload, keyBytes, JweAlgorithm.A256GCMKW, JweEncryption.A256GCM, extraHeaders:…
Nick
  • 2,877
  • 2
  • 33
  • 62
1
vote
1 answer

How can I validate a JWSObject that has a "crit" value in its headers?

I'm trying to write some code to sign and validate payloads using my private/public keys in java following JOSE standards. I need to use the PS256 encryption algorithm for this. I'm using connect2id's library Nimbus JOSE + JWT. I'm able to get to…
1
vote
2 answers

'node-jose' library is using 'zlib' library as a dependency which throws an error. How do I fix it and have you encountered the same problem?

I'm trying to use the node-jose library with angular7 for the use with JWEs. The library uses zlib as a dependency and it throws an error when compiling: ERROR in ./node_modules/zlib/lib/zlib.js Module not found: Error: Can't resolve…
1
vote
1 answer

JOSESwift jwe encryption failed to decode in the nimbus server

Had anybody used JOSESwift successfully? In my case, decryption in the server failing, probably cannot find the matching private key or wrong with encryption. Getting error 500. My code is, getting the public keys from a server.…
karim
  • 15,408
  • 7
  • 58
  • 96
1
vote
0 answers

Spomkylabs Jose PHP

I need to decrypt my cipherText using the content encryption key + IV and validate it against the AAD and tag using A128CBC-HS256. I have found this library doing this. But, I do i use it? I have searched for other jwe libraries, but they only…
Spiral1ng
  • 313
  • 1
  • 7
  • 16
1
vote
0 answers

How to use node-jose

I tried JWE encryption and decryption by following this Using node-jose, how do I decrypt the data I just encrypted? var ursa = require("ursa"); const { JWK } = require('node-jose'); const keygen = require('generate-rsa-keypair'); const jose =…
vimal prakash
  • 1,503
  • 1
  • 22
  • 38
1
vote
1 answer

Java library to parse JWT token in JWE JSON Serialization format

What opensource Java library can be used to parse/decrypt JWT token in JWE JSON serialization format as below I was looking at nimbus-jose (https://connect2id.com/products/nimbus-jose-jwt/) but I cannot find any releavnt example. I want to use some…
Andriy Kharchuk
  • 1,165
  • 1
  • 13
  • 25
1
vote
1 answer

Update JWT token field using numbus library

I have a Signed JWT token and I need to update an existing field, let's call it userName. I'm using NIMBUS + JOSE and. I figured out how to parse it and extract the claims: SignedJWT.parse(token) but parsing is not the only thing i need: I have…
ppopoff
  • 658
  • 7
  • 17
1
vote
1 answer

JWE (JSON Web Encryption) in NODE.JS

I am trying to implement JWE for my Rest API. I came across following NODE library that implements JWE. However the library lack the documentation around how JSON Web Key(JWK) should be used(JSON object) that help in Key Management Mode. The JWE…
D Deshmane
  • 1,125
  • 4
  • 15
  • 27
1
vote
1 answer

JOSE not found in Visual Studio , how to install/import it?

I started a Azure Mobile Apps Quick Start (.NET backend). I've tried to add using JOSE; in my ApiController header but it is not found in my Visual Studio: (The type or namespace name 'Jose' could not be found (are you missing a using directive or…
elliotching
  • 972
  • 1
  • 10
  • 33
1
vote
1 answer

Encryption with Javascript Object Signing and Encryption (JOSE) with JWT in iOS programming?

I am trying to integrate Javascript Object Signing and Encryption (JOSE) jose with My iOS App. Referred This Sample code : hongkongkiwi/ObjectiveC-JOSE..using to this trying to send my input parameters as encrypted format to server . If any has…
soumya
  • 3,801
  • 9
  • 35
  • 69
0
votes
0 answers

Jose JWE js to python translation not fully working (Solved)

I am currently trying to translate a website's processes to python requests calls so we can avoid using a headless browser to automate entries into the European TracesNT system. Actually entering data can already be shortened to easy POST calls, but…
Drahc
  • 1
  • 1
0
votes
1 answer

How do I verify a Firebase sessionCookie (JWT) using jose?

Setup I'm following the docs here. I'm using Next.js middleware which means I cannot use Firebase functions to verify my cookie. So, I'm attempting to verify it with jose. The Firebase docs state ensure that the session cookie was signed by the…
Ben
  • 20,038
  • 30
  • 112
  • 189
1 2 3
8 9