authenticvision / libpaseto Goto Github PK
View Code? Open in Web Editor NEWC implementation of Platform-Agnostic Security Tokens (PASETO)
Home Page: https://paseto.io
License: BSD 3-Clause "New" or "Revised" License
C implementation of Platform-Agnostic Security Tokens (PASETO)
Home Page: https://paseto.io
License: BSD 3-Clause "New" or "Revised" License
Hello. I was wondering if there is the posibility to specify the exp
time on a token
libpaseto/src/paseto_v2_local.c
Line 137 in e8bc52e
libpaseto/src/paseto_v2_public.c
Line 127 in e8bc52e
Right now, byte arrays are accepted by this API. There's no mechanism to prevent a user from using a v2 public key as a v2 local key.
It may also be a good idea to bind keys to a version, in case you want to support v4 tokens too.
Apologies for the incorrect use of an issue but it feels like the best place to ask. I need a little guidance since I'm not very proficient at reading C and don't want to take something for granted that could potentially be unsafe.
I've written some Crystal C bindings for this library and the largest area of concern is that I'm allowing the Crystal string initialiser to step over the returned pointer from paseto_v2_encrypt
which appears to terminate whenever reaches a zero byte.
The libsodium docs suggest that the returned char* will be terminated with a \0
character so I'm assuming that would be enough in this instance?
Thanks for the lib!
Hello,
Thanks for this implementation. Do you think the v2.public
interface will be supported by this lib one day?
Thanks.
Using an ESP32. Coding in Arduino.
I'm attempting to use paseto_v2_public_load_secret_key_base64
and paseto_v2_public_load_public_key_base64
functions but I'm unable to load the the keys.
I've attempted many different base64 encoding methods, including the base encoded strings generated by openssl, but not had any luck so far.
I note that https://github.com/authenticvision/libpaseto/blob/master/examples/example.c is the paseto_v2_local_load_key_base64
function and this works as expected.
I also note that you've written some tests for the paseto_v2_public_load_secret_key_hex
function, and using this function with the same hex encoded strings works as expected.
Would you be able to add an example using the paseto_v2_public_load_secret_key_base64
and paseto_v2_public_load_public_key_base64
functions please?
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.