This provides support for using JWT tokens (rfc7519).
https://tools.ietf.org/html/rfc7519
{
"iss": "jira:1314039",
"iat": 1300819370,
"exp": 1300819380,
"qsh": "8063ff4ca1e41df7bc90c8ab6d0f6207d491cf6dad7c66ea797b4614b71922e9",
"sub": "batman",
"context": {
"user": {
"email": "",
"username": "bwayne",
"displayName": "Bruce Wayne"
}
}
}GET http://www.mocky.io/v2/5ba012bf30000012007b147c
X-Auth-Token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c
(require 'jwt)
(decode-jwt
(encode-jwt #:iss "joe"
#:iat #f
#:exp 1300819380))(setq hmac-secret "my$ecretK3y")
$ openssl genrsa -out private.pem 2048
$ openssl rsa -in private.pem -out public.pem -outform PEM -pubout
- https://developer.atlassian.com/static/connect/docs/latest/concepts/understanding-jwt.html
- https://bitbucket.org/atlassian/atlassian-jwt-js
- https://github.com/auth0-blog/nodejs-jwt-authentication-sample
- https://auth0.com/learn/angularjs-authentication/
- https://auth0.com/blog/create-your-first-ember-2-dot-0-app-from-authentication-to-calling-an-api/
- https://bitbucket.org/atlassian/atlassian-jwt-js
- https://datatracker.ietf.org/wg/jose/about/
See https://jwt.io/ for a full list of implementations.
- JavaScript
const parse = token => JSON.parse(
window.atob(
token.split('.')[1]
.replace('-', '+')
.replace('_', '/')));Algorithm algorithm = Algorithm.HMAC256("secret");
String token = JWT.create()
.withIssuer("auth0")
.sign(algorithm);
JWTVerifier verifier = JWT.require(algorithm)
.withIssuer("auth0")
.build(); //Reusable verifier instance
DecodedJWT jwt = verifier.verify(token);- Clojure: https://github.com/liquidz/clj-jwt
(def claim
{:iss "foo"
:exp (plus (now) (days 1))
:iat (now)})
(let [token (-> claim jwt (sign :HS256 "secret") to-str)]
(-> token str->jwt (verify "secret")))- Common Lisp: https://github.com/fukamachi/jose
(defvar *key* (ironclad:ascii-string-to-byte-array "my$ecret"))
(defvar *token*
(jose:encode :hs256 *key* '(("hello" . "world"))))
const token = jwt.sign({ foo: 'bar' }, 'shhhhh');
const decoded = jwt.verify(token, 'shhhhh');payload = { 'foo': 'bar', 'wup': 90 };
token = jwt.generate_jwt(payload, key, 'PS256', datetime.timedelta(minutes=5))
header, claims = jwt.verify_jwt(token, pub_key, ['RS256'])let token = encode(&Header::default(), &my_claims, "secret".as_ref())?;
let decoded = decode::<Claims>(&token, "secret".as_ref(), &Validation::default())?;
(decode-jwt
(encode-jwt #:iss "joe"
#:iat #f
#:exp 1300819380))
token = JWT.encode payload, hmac_secret, 'HS256'
token_rsa = JWT.encode payload, rsa_private, 'RS256'
decoded_token = JWT.decode token, hmac_secret, true, { algorithm: 'HS256' }claim = {
iss: 'nov',
exp: 1.week.from_now,
nbf: Time.now
}
jws = JSON::JWT.new(claim).sign(private_key, :RS256)- Go
- Elixir
- Haskell
- Scala
(add-hook 'emacs-lisp-mode-hook 'ert-modeline-mode)
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent