Comments (4)
andrewbaxter
commented on June 1, 2024
Ah... ring limitations. briansmith/ring#579 and confirmed in breard-r/acmed#2 (comment)
from jsonwebtoken.
andrewbaxter
commented on June 1, 2024
Partially solved: briansmith/ring#1161 (RSA)
from jsonwebtoken.
andrewbaxter
commented on June 1, 2024
It looks like it's pretty easy to get the ecdsa public key coords, if uncompressed it's just 1 byte past the public key start. https://datatracker.ietf.org/doc/html/rfc5480#section-2.2 with a hint in https://datatracker.ietf.org/doc/html/rfc7518#section-6.2.1.2 and .3
Ed25519 looks very complex, comparatively: https://crypto.stackexchange.com/questions/51663/how-can-i-split-a-packed-ed25519-public-signing-key-into-its-x-and-y-coordinates
from jsonwebtoken.
andrewbaxter
commented on June 1, 2024
FWIW Caddy doesn't support Ed25519 either: https://github.com/mholt/acmez/blob/422d0ad3b73253c35dc2b9d0be29ad55385df3ff/examples/attestation/main.go#L268
from jsonwebtoken.
Related Issues (20)
- ES256 errors with InvalidEcdsaKey HOT 5
- `aud` mismatch rejections are hard to debug
- Adding secrecy or zeroize for EncodingKey and DecodingKey HOT 1
- ES256 decoding doesn't work HOT 1
- `decode` panics on `wasm32-unknown-unknown` when `validate_exp` is `true` HOT 4
- Getting error InvalidAudience when decoding token HOT 1
- Support for compressed tokens HOT 7
- [Bug] Error(MissingRequiredClaim("exp")) HOT 4
- Nonce validation HOT 1
- Document that "exp" field is required HOT 2
- Support millisecond validation on `exp` of Claims HOT 2
- Implement Brainpool ciphers HOT 1
- Changes for ACME support HOT 2
- Urlsafe base64 hmac keys HOT 2
- Misleading function name `DecodingKey::from_ed_der`. HOT 8
- Support Extra Key/Value Pairs in the Header HOT 3
- Add support for negative leeway values HOT 8
- How to customize the Header field HOT 3
- `validate_exp` should also reject tokens that contain a `exp` field but that can not be parsed
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from jsonwebtoken.