Function sign_token_payload

src/orgkernel/crypto_utils.py:196–211

Sign ExecutionToken payload with the Org CA private key. Args: private_key_pem: Org CA PKCS8 PEM private key. token_data: Dict of token fields (as passed to ExecutionToken.to_signable_payload()). Returns: Base64url-encoded Ed25519 CA signature.

(
    private_key_pem: str,
    token_data: dict[str, Any],
)

def sign_token_payload(
    private_key_pem: str,
    token_data: dict[str, Any],
) -> str:
    """
    Sign ExecutionToken payload with the Org CA private key.

    Args:
        private_key_pem: Org CA PKCS8 PEM private key.
        token_data: Dict of token fields (as passed to ExecutionToken.to_signable_payload()).

    Returns:
        Base64url-encoded Ed25519 CA signature.
    """
    payload = canonical_json(token_data)
    return sign_payload(private_key_pem, payload)