authenticvision / libpaseto Goto Github PK

Hello. I was wondering if there is the posibility to specify the exp time on a token

See https://github.com/paseto-standard/paseto-spec/blob/master/docs/02-Implementation-Guide/03-Algorithm-Lucidity.md

Right now, byte arrays are accepted by this API. There's no mechanism to prevent a user from using a v2 public key as a v2 local key.

It may also be a good idea to bind keys to a version, in case you want to support v4 tokens too.

Apologies for the incorrect use of an issue but it feels like the best place to ask. I need a little guidance since I'm not very proficient at reading C and don't want to take something for granted that could potentially be unsafe.

I've written some Crystal C bindings for this library and the largest area of concern is that I'm allowing the Crystal string initialiser to step over the returned pointer from paseto_v2_encrypt which appears to terminate whenever reaches a zero byte.

The libsodium docs suggest that the returned char* will be terminated with a \0 character so I'm assuming that would be enough in this instance?

Thanks for the lib!

Hello,

Thanks for this implementation. Do you think the v2.public interface will be supported by this lib one day?

Thanks.

Using an ESP32. Coding in Arduino.

I'm attempting to use paseto_v2_public_load_secret_key_base64 and paseto_v2_public_load_public_key_base64 functions but I'm unable to load the the keys.

I've attempted many different base64 encoding methods, including the base encoded strings generated by openssl, but not had any luck so far.

I note that https://github.com/authenticvision/libpaseto/blob/master/examples/example.c is the paseto_v2_local_load_key_base64 function and this works as expected.

I also note that you've written some tests for the paseto_v2_public_load_secret_key_hex function, and using this function with the same hex encoded strings works as expected.

Would you be able to add an example using the paseto_v2_public_load_secret_key_base64 and paseto_v2_public_load_public_key_base64 functions please?