Questions tagged [jose]

JOSE (Javascript Object Signing and Encryption) is a framework intended to provide a method to securely transfer claims (such as authorization information) between parties

JOSE (Javascript Object Signing and Encryption) is a framework intended to provide a method to securely transfer claims (such as authorization information) between parties

The JOSE framework provides a collection of specifications to serve this purpose. A JSON Web Token (JWT) contains claims that can be used to allow a system to apply access control to resources it owns.

One potential use case of the JWT is as the means of authentication and authorization for a system that exposes resources through an OAuth 2.0 model.

Official Website

131 questions
0
votes
1 answer

how to decode and verify aws cognito JWT IdToken from nodeJS and Browser?

I would like to decode & verify the IdToken provided by AWS cognito. Simple code that could be used on NodeJs(server) and Browser (the same code). I tried to use the classic jwt-decode but it has some problems on the browser side due dependencies on…
Jaekov Segovia
  • 113
  • 1
  • 7
0
votes
0 answers

Issues with decoding recipient encrypted key in dart

I'm getting the following error while trying to decode recipient encrypted key in Dart (jose library): Unhandled Exception: FormatException: Unexpected extension byte (at offset 0) I'm decoding header with following method: JoseHeader joseHeader =…
dave
  • 1
  • 1
0
votes
1 answer

Generated JWT gets Invalid Signature in jwt.io

I'm trying to access a site that requires a JWT to use it's API. So I wrote this code in order to generate it: library(jose) secret = "ed577ae6d3661fec225c24" jwt = jwt_encode_hmac( claim = jwt_claim( exp = as.numeric(Sys.time() + 300) ), …
Juan M
  • 119
  • 10
0
votes
0 answers

JWT Maximum execution time of 30 seconds exceeded in brick/math/src/Internal/Calculator/NativeCalculator.php on line 322

I am trying to produce a JWT from the instructions on this site https://web-token.spomky-labs.com. All dependencies that I know of have been installed. My code is below. I get the 30 sec time out. What's missing? The RSA key was generated on 8x8…
user1794918
  • 1,131
  • 2
  • 16
  • 34
0
votes
1 answer

php jwt framework decrypt token Multiple Recipients error

require __DIR__ . '/../../vendor/autoload.php'; use Jose\Component\Core\AlgorithmManager; use Jose\Component\Encryption\Algorithm\ContentEncryption\A256CBCHS512; use Jose\Component\Encryption\Algorithm\KeyEncryption\RSAOAEP256; use…
gooddev
  • 1
  • 1
0
votes
0 answers

Unity3d Issue - Assembly will not be loaded due to errors: X references strong named Y Assembly references: 10.0.0.0 Found in project: 13.0.0.0

I have an issue with a dll im using inside unity3d. Im trying to use the jose-jwt.dll link to the library: https://www.nuget.org/packages/jose-jwt-forunity/ and when I'm importing it into unity3d I get this error: Assembly 'Assets/jose-jwt.dll' will…
mindblast6
  • 43
  • 1
  • 6
0
votes
1 answer

Implementing JWE encryption for a JWS signed token in Node.JS with Jose 4.11

I have difficulty manipulating the Jose Node.JS documentation to chain the creation of a JWS and JWE. I cannot find the proper constructor for encryption. It looks like I can only encrypt a basic payload not a signed JWS. Here is the code sample I…
Benoit Patra
  • 4,355
  • 5
  • 30
  • 53
0
votes
2 answers

Convert jwk to pem in nest.js

I have this jwk key that I wanto convert into pem: const jwkey = { kty: 'RSA', kid: 'eecb0ced-4d49-4100-9547-841e4100b756', n: '...very long string', e: 'AQAB', alg: 'RS256', use: 'sig', }; I have tried the libraries like jose, node-rsa…
0
votes
0 answers

What is the correct file extension for PEM-encoded SPKI strings?

I'm using the library jose to generate a public key. I'm using the function exportSPKI to convert the key object to a PEM-encoded SPKI string format. An example might be const publicKey = `-----BEGIN PUBLIC…
baitendbidz
  • 187
  • 3
  • 19
0
votes
0 answers

JWT Introspect with JOSE

I have inherited a node express application, which exposes rest APIs. That system can get a jwt in the request and verify using jose.verify method. Means that it verifies the jwks. The task I have is to be able to check if there was a revoke on the…
moshi
  • 280
  • 4
  • 16
0
votes
1 answer

What am I doing wrong in the following code where I'm trying to achieve asymmetric signing and encryption using jose-python?

from jose import jws from jose import jwe with open('privkey.pem', mode='r') as privatefile: privkey = privatefile.read() with open('pubkey.pem', mode='r') as pubfile: pubkey = pubfile.read() …
Taz
  • 15
  • 3
0
votes
1 answer

how can i get a es384 JWT TOKEN with only a pem file in .net?

var payload = new Dictionary() { //xxx }; var privateKey = ???; // only got a pem file like //-----BEGIN PRIVATE KEY----- //xxxxxxxxxxxxxxx //-----END PRIVATE KEY----- //how can i get a key for…
0
votes
1 answer

ACME Client Implementation

I am currently working on my own ACME client implementation. I generated the following JWS: {"protected":…
0
votes
1 answer

How would you get JOSE working in an Expo app?

I wrote a small PoC for JOSE which works on Expo web but fails on iOS because it's looking for crypto and it's showing can't find variable: crypto
Archimedes Trajano
  • 35,625
  • 19
  • 175
  • 265
0
votes
2 answers

Unable to decrypt JWE with NPM Jose package

I'm able to decrypt a JWE with an older version of jose but I'm struggling to use the latest version API. My token headers are the following: { "alg": "A128KW", "enc": "A128CBC-HS256", "typ": "JWT" } With jose 2.0.3 this code (copied from…
Arcord
  • 1,724
  • 1
  • 11
  • 16
1 2 3
8 9