codedust

Results 60 comments of codedust

> > What makes you so sure that it will be added to toxcore? > > Nothing. I wanted to say: "If this feature will be added to toxcore." see...

Since this library currently does not support the JWK format, an alternative would be to calculate the `kid` from an X.509 certificate as suggested by the [ETSI JAdES specification](https://www.etsi.org/deliver/etsi_ts/119100_119199/11918201/01.01.01_60/ts_11918201v010101p.pdf): >...

This is intended behavior. To prevent users from accidentally skipping signature validation, signature validation should be the default . An exit status of `0` indicates that everything is fine. If...

I think, adding a `verify` command would be a good solution. This way, `decode` could still be used to simply show the contents of a jwt and `verify` could be...

I've now added the `verify` subcommand and rebased to main. Now, the `decode` subcommand does not verify any signatures any more and does not expect the `--secret`, ignore_exp` and `--alg`...

From my experience, asymmetric algorithms like `PS512` and `PS512` are very common (and an absolute must) in scenarios where the authorization server and the resource server are not operated by...

This is already possible using the `-S` parameter: ```bash jwt decode --alg 'HS256' -S ``` e.g. ```bash JWT=`jwt encode '{"field":"value"}' --secret 1234567890 --alg 'HS256' --exp '+1 year'` jwt decode --alg...

Working with Uint8Array would be super helpful when encrypting/decrypting files.