Class JWT

include/process/jwt.hpp:57–158

* A JSON Web Token (JWT) implementation. * @see RFC 7519 * * This implementation supports the 'none', 'RS256' and 'HS256' algorithms. * Header parameters other than 'alg' and 'typ' aren't parsed. To comply * with RFC 7515, headers with 'crit' parameter are invalid. * Currently, only the 'exp' standard claim is validated. Applications * that

 * validation logic.
 */
class JWT
{
public:
  enum class Alg
  {
    None,
    HS256,
    RS256
  };

  struct Header
  {
    Alg alg;
    Option<std::string> typ;
  };

  /**
   * Parse an unsecured JWT.
   *
   * @param token The JWT to parse.
   *
   * @return The JWT representation if successful otherwise an Error.
   */
  static Try<JWT, JWTError> parse(const std::string& token);

  /**
   * Parse a JWT and validate its HS256 signature.
   *
   * @param token The JWT to parse.
   * @param secret The secret to validate the signature with.
   *
   * @return The validated JWT representation if successful otherwise an
   *     Error.
   */
  static Try<JWT, JWTError> parse(
      const std::string& token,
      const std::string& secret);

  /**
   * Parse a JWT and validate its RS256 signature.
   *
   * @param token The JWT to parse.
   * @param publicKey The public key to validate the signature with.
   *
   * @return The validated JWT representation if successful otherwise an
   *     Error.
   */
  static Try<JWT, JWTError> parse(
      const std::string& token,
      std::shared_ptr<RSA> publicKey);

  /**
   * Create an unsecured JWT.
   *
   * @param payload The payload of the JWT.
   *
   * @return The unsecured JWT representation if successful otherwise an
   *     Error.