Jwk

A public key a token is checked against (RFC 7517, RFC 7518 and RFC 8037), one of three kinds by its kty: OKP, an Ed25519 key, crv Ed25519 and x; RSA, n and e, its modulus 2,048 to 4,096 bits; or EC, a P-256 key, crv P-256, x and y, a point on the curve; each in unpadded Base64url, used with one algorithm, EdDSA, RS256 or ES256, with an optional key id and certificates (x5c, each standard Base64 DER); use_ is sent as use, and key_ops holds the operations it may be used for, a key without verify checking no token. Never a private key or a shared secret; members it doesn't hold are ignored.

Security; not ordered; since Jadpo 0.1.0.

Make one

Build one from its fields, Jwk { kty: ... }.

Its parts keep these rules; a value that breaks one fails with the rule's name:

• parts_of_its_kty: an OKPkey hascrv Ed25519andx, an RSAkeynande, and an ECkeycrv P-256, xandy, and none another's
• algorithm_of_its_kty: alg is EdDSA for an OKPkey, RS256 for anRSAkey and ES256 for anEC key
• a_usable_key: an RSAkey's modulus is 2,048 to 4,096 bits and odd, its exponent odd and from 3 to 2^32 - 1; anEC key's point is on P-256

Fields

Text, JSON and storage

It has no single text form, so text.from and text.parse don't take it. JSON sends an object of its parts.

It is stored in 11 columns, each named for the field, _ and its suffix. This is {"kty":"EC","crv":"P-256","x":"MKBCTNIcKUSDii11ySs3526iDZ8AiTo7Tu6KPAqv7D4","y":"4Etl6SRW2YiLUrN5vfvVHuhp7x8PxltmWWlbbM4IFyM","kid":"1","use":"sig"}:

Shown to people

text.format(value, locale:) shows it to people in their locale.

With locale: Locale.en_gb:

Operations

• crypto.verify_jwt(token: Jwt, keys: List<Jwk>, issuer: Text?, audience: Text?, as: Type?) -> JwtClaims: The registered claims of token once it holds: signed by one of keys with that key's own algorithm (Ed25519, RS256 for an RSA key, ES256 for a P-256 key), never the one the token names, so none and every other algorithm fail invalid_signature; not expired, not used before its nbf and not issued later than now, against the clock with 30 seconds' leeway (expired, not_yet_valid); issued by issuer when one is given (wrong_issuer); and for audience, or for no audience when none is given (wrong_audience). A token that isn't one, or has no exp, is malformed. With as:, an object type of the application's, it gives instead the token's claims the type names, read as json.read reads it, a registered one as JwtClaims holds it, and fails mismatch when they aren't the type. It reads the clock, so it is called only in actions.

Like every standard type, it also has the contract's own operations: text.format, json.read, json.write and ==. It isn't ordered, so < and sorting don't take it. Every standard type meets one contract says how they work.