Questions tagged [jose]

JOSE (Javascript Object Signing and Encryption) is a framework intended to provide a method to securely transfer claims (such as authorization information) between parties

JOSE (Javascript Object Signing and Encryption) is a framework intended to provide a method to securely transfer claims (such as authorization information) between parties

The JOSE framework provides a collection of specifications to serve this purpose. A JSON Web Token (JWT) contains claims that can be used to allow a system to apply access control to resources it owns.

One potential use case of the JWT is as the means of authentication and authorization for a system that exposes resources through an OAuth 2.0 model.

Official Website

131 questions
0
votes
1 answer

I have JWT middleware set up in ASP.NET Core 2.2 Web API. It only works with RSA256 and NOT HS256

For the problem stated in the title, when I attempt an RSA256 Access Token, the JWT Decode decodes it and more importantly, "OnTokenValidated" gets called from the JwtBearer events. Here's the code shortened for brevity. Remember, this works fine…
0
votes
1 answer

Use JOSE JWE for encryption of big files

I need to encrypt some bigger files < 1GB in a secure and efficient way. Is it a good idea to use JOSE JWE libraries for that purpose? Is there any other option you can recommend? Thanks, Simon
Simon
  • 171
  • 2
  • 11
0
votes
0 answers

Getting Error "Key not valid for use in specified state."

I am getting Key not valid for use in specified state. error while decoding the token from Jose.Jwt.Decode method. Jose.Jwt is a third party library I am using for JWT token encryption & decryption. var privateKey = certificate.PrivateKey as…
shubham bahuguna
  • 384
  • 4
  • 16
0
votes
0 answers

Encryption and Decryption with node-jose in Node.JS

I am trying to JSON with JWE using node-jose in Node.js. Following are the steps i am doing. I have Java key store through which I have exported Certificate for Encryption and Private for Decryption. For Encryption var publicKEY =…
user1162546
  • 13
  • 1
  • 6
0
votes
1 answer

Validation of PS256 encoded JWT using C#

I've been tasked to validate a JWT token that's been encoded using the PS256 algorithm and for the last two days I've been having trouble with it. I lack knowledge on this subject and I've been chipping away slowly at the problem trying different…
underscoreHao
  • 331
  • 2
  • 9
0
votes
1 answer

wso2am-2.6.0 invalid jwt signature

Enabling JWT signature for backend services in WSO2AM-2.6.0 (6.x branch) true X-JWT-Assertion
gusto2
  • 11,210
  • 2
  • 17
  • 36
0
votes
0 answers

Generate the SAME JOSE token between client and server (PHP-C#)

Well, I'm trying to generate the same key with this two libraries: https://github.com/dvsekhvalnov/jose-jwt this is for C# https://github.com/Spomky-Labs/jose and this is for PHP I have implemented both: In C#: public static string CypherData(T…
z3nth10n
  • 2,341
  • 2
  • 25
  • 49
0
votes
1 answer

Encryption with public key in Jose-JWT

I think this question is not a dupe, so I will try to explain my situation. I'm testing JWT, more specifically JOSE-JWT lib from Github, and well, I'm having troubles. I'm generating a private-public key pair and sending to the client the public…
z3nth10n
  • 2,341
  • 2
  • 25
  • 49
0
votes
1 answer

JWT decrypts, but throws a mac check failed error

I have a jhipster spring boot application which accepts a token generated by a third party which has been encrypted with our public key. I have a JWTFilter which decrypts the token using our private key and creates an authentication object which is…
thejames42
  • 447
  • 6
  • 22
-1
votes
1 answer

Getting results from promise - Nodejs

I am using nodejs with this library node-jose, to get allow me to do get my private key and using it to sign and/or decript. So the problem now is this. I am trying to return a signature from result after generating it by is unable to do so. At…
shadow
  • 800
  • 2
  • 16
  • 33
-3
votes
1 answer

AttributeError: module 'jose' has no attribute 'sign'

EDIT I was trying to simply generate a jwt using python-jose but I didn't find a clear example. I followed the one below, which wasn't what I really needed. After following the answer 1 I updated the code to this and it works. !/usr/bin/env…
Alaa
  • 539
  • 3
  • 8
  • 29
1 2 3
8
9