10 Commits (master)

Author	SHA1	Message	Date
Kim Alvefur	43531740f9	util: Prefix module imports with prosody namespace	3 years ago
Matthew Wild	99748c5655	util.paseto: Add support for v3.local tokens	3 years ago
Matthew Wild	cd9ef3168a	util.paseto: Fix omitted parameter	3 years ago
Matthew Wild	f987c4343e	util.paseto: Stricter base64 decoding, as per spec	3 years ago
Kim Alvefur	a3e182ffa1	util.paseto: Do strict type check in pae() function ... Fixes a test failure on Lua 5.4 where ipairs("") does not produce an error.	4 years ago
Matthew Wild	e12c9a83df	util.paseto: Drop custom wrappers around key objects ... The PASETO spec recommends - no, *requires* - that implementations enforce type safety for keys, and e.g. do not pass them around as arbitrary byte strings. Typed wrapper objects are recommended. I originally followed this advice when starting the lib. However, key wrapping and type safety is now also a feature of util.crypto. All we're doing is duplicating it unnecessarily with this additional wrapper code.	4 years ago
Matthew Wild	4e4c2dd6dc	util.paseto: Export similar API to new util.jwt for ease and consistency	4 years ago
Matthew Wild	2db2476824	util.paseto: Error early on invalid keys	4 years ago
Matthew Wild	e2f61d6e7e	util.paseto: Fix to decode footer before comparison	4 years ago
Matthew Wild	4122acf8c8	util.paseto: Implementation of PASETO v4.public tokens ... PASETO provides an alternative to JWT with the promise of fewer implementation pitfalls. The v4.public algorithm allows asymmetric cryptographically-verified token issuance and validation. In summary, such tokens can be issued by one party and securely verified by any other party independently using the public key of the issuer. This has a number of potential applications in a decentralized network and ecosystem such as XMPP. For example, such tokens could be combined with XEP-0317 to allow hats to be verified even in the context of a third-party MUC service.	4 years ago