Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ngx oauth2 access token/v0.0.1 pre.7 #19

Merged
merged 8 commits into from
Jun 7, 2023

Conversation

mrpachara
Copy link
Owner

The main feature is verifying JWT service. Actually it is not necessary on client-side but in some rarely cases, it may be useful.

* add file replacement

* change .gitignore location

* add JWK standard types

* typo

* add jwt verifiers

* custom service can use fullconfig

* add provideVerifiers()
* provide functions updated

* update importing paths

* remove storage from public api
@mrpachara mrpachara added the enhancement New feature or request label Jun 7, 2023
@mrpachara mrpachara self-assigned this Jun 7, 2023
@changeset-bot
Copy link

changeset-bot bot commented Jun 7, 2023

⚠️ No Changeset found

Latest commit: 09d4203

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@mrpachara
Copy link
Owner Author

We want to make this library simple and small. So we just implement the recommended algorithms that are supported by SubtleCrypto from Web API. The supported algorithms are:

  • HMAC with alg = HS256 (check supported browsers). If it is not too hard, HS384 and HS512 would be supported.
  • RSASSA-PKCS1-v1_5 with alg = RS256 (check supported browsers). If it is not too hard, RS384 and RS512 would be supported.
  • ECDSA with alg = ES256 (check supported browsers). If it is not too hard, ES384 and ES512 would be supported.

The required EdDSA will be separated to another library.

References:

@mrpachara mrpachara merged commit bdc010f into main Jun 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant