The jsonwebtoken from noha

jsonwebtoken's People

Contributors

Stargazers

Watchers

jsonwebtoken's Issues

Implement RS256 (RSA Signature with SHA-256)

(In class JWARSASHA256)

Should it work with https://github.com/pharo-contributions/Cryptography as dependency?

(BTW, thanks for this project)

In Pharo 9 - Getting 'Instance of LcLibCrypto ddi not undertand #moduleName' when using JSONWebToken

I think I remember that the name of this methods changed in recent years, but also that there is a version of LcLibCrypto which is compatible with Pharo 9.

Using "none" as the algorithm gives a DNU

Because JWANone returns a String and not a ByteArray.

Unable to verify jwt against an RSA PUBLIC KEY

For this I had to extend LcRSA

LcRSA>>fromRsaPublicKeyPemString: pemString
	| nullp bio |
	nullp := FFIExternalObject new.
	bio := LcMemoryBIO fromString: (self cr2lf: pemString).
	[ handle := LcLibCrypto current
		apiPemReadBioRsaPublicKey: bio handle
		with: nullp
		with: nullp
		with: nullp.
	self errorIfNull: handle ]
		ensure: [ bio close ]

LcRSA class>>fromRsaPublicKeyPemString: pemString
	^ self new
		fromRsaPublicKeyPemString: pemString;
		yourself

Extend LcLibCrypto

LcLibCrypto>>apiPemReadBioRsaPublicKey: bio with: rsa with: cb with: uv
	^ self
		ffiCall:
			#(RSA * PEM_read_bio_RSAPublicKey #(BIO * bio , RSA ** rsa , FFIExternalObject cb , FFIExternalObject uv))
		module: self library

Then override:

JWARSASHA256 class>>checkSignature: parts withKey: key
...
rsa := (key includesSubstring: 'BEGIN RSA PUBLIC KEY')
		ifTrue: [ LcRSA fromRsaPublicKeyPemString: key ]
		ifFalse: [ LcRSA fromPemString: key ].
	pubKey := LcEvpPublicKey setRSA: rsa.
...

On top of this I also have a non rsa variant (BEGIN PUBLIC KEY), which I don't use/need at this moment. If you want I can provide you with the LcLibCrypto method and LcRSA method.

Recommend Projects