13 Commits (ea2f97e9ed8317dc9a62e45d9a807dca7e3700a5)

Author	SHA1	Message	Date
Kim Alvefur	43531740f9	util: Prefix module imports with prosody namespace	3 years ago
Matthew Wild	e7bfb40a32	util.jwt: More robust ECDSA signature parsing, fail early on unexpected length	3 years ago
Matthew Wild	5ca81b0e3b	util.jwt: Add support for ES512 (+ tests)	3 years ago
Matthew Wild	8695a72a66	util.crypto, util.jwt: Generate consistent signature sizes (via padding) ... This fixes the signature parsing and building to work correctly. Sometimes a signature was one or two bytes too short, and needed to be padded. OpenSSL can do this for us.	3 years ago
Matthew Wild	ff54cc5bcf	util.jwt: Add new init() convenience method to obtain both signer and verifier	4 years ago
Matthew Wild	d2ede10c5d	util.jwt: Consolidate payload parsing, ensure it's always a valid object	4 years ago
Matthew Wild	23458111dc	util.jwt: Provide built-in token expiry support (defaults to 3600s lifetime) ... To avoid every user of the library needing to add and verify expiry info, this is now handled by util.jwt itself (if not overridden or disabled). Issuing tokens that are valid forever is bad practice and rarely desired, and the default token lifetime is now 3600s (1 hour).	4 years ago
Matthew Wild	fad58c5ab2	util.jwt: All the algorithms (+ all the tests!) ... Except 'none'. Not implementing that one.	4 years ago
Matthew Wild	5316b0005e	util.crypto: More digests for sign/verify, use macros for clarity/consistency	4 years ago
Matthew Wild	0b0555c339	util.jwt: Add support for RSA-based algorithms (RS256, PS256)	4 years ago
Matthew Wild	ae16ddcac7	util.jwt: Add support/tests for ES256 via improved API and using util.crypto ... In many cases code will be either signing or verifying. With asymmetric algorithms it's clearer and more efficient to just state that once, instead of passing keys (and possibly other parameters) with every sign/verify call. This also allows earlier validation of the key used. The previous (HS256-only) sign/verify methods continue to be exposed for backwards-compatibility.	4 years ago
Matthew Wild	8048b53d18	util.jwt: Use constant-time comparison with expected signature	5 years ago
Kim Alvefur	0bcbbed753	util.jwt: Basic JSON Web Token library supporting HS256 tokens	6 years ago