added jsonwebtoken as inbuilt library

[anusree-bruno]

Description

Add JWT Support to Bruno Runtime

Description

This PR adds support for the jsonwebtoken library in Bruno's runtime environment, allowing users to work with JWT tokens in their API requests and tests.

Changes

1. Added jsonwebtoken as a dependency in packages/bruno-js/package.json
2. Exposed the JWT library in Bruno's runtime environment
3. Added comprehensive test coverage for JWT functionality

Technical Details

• The JWT library is now available in pre-request, post-response and test scripts
• Users can require the library using const jwt = require('jsonwebtoken')
• All standard JWT operations are supported (sign, verify, decode)

Example Usage

meta {
  name: jwt
  type: http
  seq: 1
}

get {
  url: {{host}}/ping
  body: none
  auth: none
}

script:pre-request {
  const jwt = require('jsonwebtoken');
  
  // Create a payload
  const payload = {
    userId: "12345",
    username: "testuser",
    role: "admin",
    iat: Math.floor(Date.now() / 1000),
    exp: Math.floor(Date.now() / 1000) + (60 * 60) // expires in 1 hour
  };
  
  // Sign the token
  const secret = "test-secret-key";
  const token = jwt.sign(payload, secret);
  
  // Store the token and payload for later verification
  bru.setVar("jwt-token", token);
  bru.setVar("jwt-payload", payload);
  bru.setVar("jwt-secret", secret);
  
  // Set the token in the Authorization header
  req.setHeader("Authorization", `Bearer ${token}`);
}

script:post-response {
  const jwt = require('jsonwebtoken');
  const token = bru.getVar("jwt-token");
  const secret = bru.getVar("jwt-secret");
  
  // Decode the token
  const decoded = jwt.decode(token);
  bru.setVar("jwt-decoded", decoded);
  
  // Verify the token
  try {
    const verified = jwt.verify(token, secret);
    bru.setVar("jwt-verified", verified);
  } catch (error) {
    bru.setVar("jwt-verification-error", error.message);
  }
}

tests {
  const jwt = require('jsonwebtoken');
  
  test("JWT token should be properly generated", function() {
    const token = bru.getVar("jwt-token");
    expect(token).to.be.a('string');
    expect(token.split('.')).to.have.lengthOf(3); // JWT should have 3 parts
  });
  
  test("Decoded token should match original payload", function() {
    const decoded = bru.getVar("jwt-decoded");
    const payload = bru.getVar("jwt-payload");
    
    expect(decoded.userId).to.equal(payload.userId);
    expect(decoded.username).to.equal(payload.username);
    expect(decoded.role).to.equal(payload.role);
  });
  
  test("Token should be successfully verified", function() {
    const verified = bru.getVar("jwt-verified");
    const payload = bru.getVar("jwt-payload");
    
    expect(verified.userId).to.equal(payload.userId);
    expect(verified.username).to.equal(payload.username);
    expect(verified.role).to.equal(payload.role);
  });
  
  test("Token should have valid expiration", function() {
    const decoded = bru.getVar("jwt-decoded");
    const now = Math.floor(Date.now() / 1000);
    
    expect(decoded.exp).to.be.a('number');
    expect(decoded.exp).to.be.greaterThan(now);
  });
  
  test("Token should have valid issued at time", function() {
    const decoded = bru.getVar("jwt-decoded");
    const now = Math.floor(Date.now() / 1000);
    
    expect(decoded.iat).to.be.a('number');
    expect(decoded.iat).to.be.lessThanOrEqual(now);
  });
  
  test("Invalid token verification should fail", async function() {
    const token = bru.getVar("jwt-token");
    const invalidSecret = "wrong-secret-key";
    
    try {
      jwt.verify(token, invalidSecret);
      expect.fail("Token verification should have failed with wrong secret");
    } catch (error) {
      expect(error.message).to.include("invalid signature");
    }
  });
}

Testing

Added test coverage in packages/bruno-tests/collection/scripting/inbuilt modules/jwt/ to verify:

• Token generation and signing
• Token verification and decoding

Related Issues

• Closes https://github.com/usebruno/bruno/issues/1677

Contribution Checklist:

• [x] The pull request only addresses one issue or adds one feature.
• [x] The pull request does not introduce any breaking changes
• [x] I have added screenshots or gifs to help explain the change if applicable.
• [x] I have read the contribution guidelines.
• [x] Create an issue and link to the pull request.