Gist 86a2162840809aa2b4e4890ec2ba7100

100%

Gist 86a2162840809aa2b4e4890ec2ba7100

✓ Published0🌍 Public

Last edited Oct 13, 2020

Created on Oct 13, 2020

This example demonstrates how to create and validate a JSON Web Token (JWT) using the Scala library `pdi.jwt` with ES256 asymmetric encryption. It shows the complete token lifecycle: generating a key pair with `GeneratorKeyFactory` on the `PRIME256V1` curve, encoding claims (including custom fields like `role` and `env`), and finally decoding and verifying the token with the public key. The code serializes claims using `org.json4s` and `jackson.compactJson`, highlighting the interplay between JWT construction, cryptographic signing, and verification.

AI-generated description

Similar vizzes

Loading thumbnail…

Gist d8122161cee20af6219aa00b744ec60e

This example decodes a JSON Web Token (JWT) in Scala, showing the three components of the token: header, payload, and signature. It uses the `pdi.jwt` library to encode a claim with a secret key and the HS256 algorithm, then decodes it back with `Jwt.decodeRawAll`. The payload contains issuer, audience, expiration, and a custom role claim, serialized via `org.json4s`.

CCarlos-Augusto

86% match

Loading thumbnail…

Gist c2007066af4a2f2b97d4293778f8af5d

This Scala example demonstrates a complete JWT (JSON Web Token) lifecycle, creating a signed token with custom claims and then verifying and decoding it. The code generates an ES256 key pair using `GeneratorKeyFactory` from the Ubirch crypto library, then encodes a token with `Jwt.encode` that includes tenant, device, UUID identifiers, and custom role claims, before decoding it back with `Jwt.decodeRawAll` to display the parsed header, payload, and signature. The visualized output is the `Try` result showing the extracted JSON claims alongside the cryptographic signature.

CCarlos-Augusto

86% match

Loading thumbnail…

Using Node-Jose to for RSA jwt with key store

This example demonstrates how to sign and verify a JSON Web Token (JWT) using RSA keys managed through the `node-jose` keystore. It generates a fresh RSA 2048-bit key pair, stores it as a JSON keystore file, and then signs a payload with `JWS.createSign` using the `RS256` algorithm. The code also verifies the token with `JWS.createVerify`, converts the JWK to PEM via `jwk-to-pem`, and validates it again with the `jsonwebtoken` library’s `jwt.verify`. The keystore is loaded from or saved to `.cert/keystore.json`.

AAnsonT

63% match

Loading thumbnail…

Gist 22c21fedfe1389197d55288d2e2be93d

This example demonstrates a Scala implementation of HMAC-SHA256 message authentication, showing how to generate a signed hash of the string "Hello World" using a hardcoded Base64-encoded secret key. It relies on the BouncyCastle cryptographic provider, added via `Security.addProvider`, and uses the Java Cryptography Architecture's `Mac` and `SecretKeySpec` classes to initialize the HMAC with the decoded key and the "HmacSHA256" algorithm. The code processes the input bytes through `mac.update` and finally outputs the resulting MAC as a Base64-encoded string, producing a specific authentication tag.

CCarlos-Augusto

57% match

Loading thumbnail…

Gist 92ed5ad616da212ef7199f955f413567

This example shows a Java client that sends a COVID-19 vaccination certificate request to a demo certification API over HTTPS, using a custom SSL keystore for mutual authentication. It first performs a GET request to the base URL, then posts a JSON test payload containing patient and test data to the `/api/certify/v2/issue` endpoint, requesting a CBOR-encoded response. The code uses Apache HttpClient 4.5’s `CloseableHttpClient`, `HttpClients.custom()`, and `SSLContexts.custom()` with a Java KeyStore, along with `StringEntity` and `ContentType` to set the JSON body. Responses, including status lines, headers, and body text, are printed to the console.

CCarlos-Augusto

56% match

Loading thumbnail…

Simplest Passport/JWT implementation with cookie and bearer authentication support

This example demonstrates a minimal JSON Web Token (JWT) authentication flow using Passport.js, supporting both HTTP-only signed cookies and bearer tokens in the Authorization header. It shows registration, login, and a protected `/secret` route, with user credentials hashed via bcrypt and tokens signed by `jsonwebtoken`. The code relies on `passport-jwt`’s `ExtractJwt.fromExtractors` to combine a custom cookie extractor with `fromAuthHeaderAsBearerToken`. The in-memory `Users` class stores user data and validates passwords asynchronously, while the server uses Express, `body-parser`, and `cookie-parser` for request handling.

AAnsonT

55% match

Loading thumbnail…

How to create a CSR for the identity service

This example generates a certificate signing request (CSR) for an identity service using an Ed25519 key pair. It demonstrates how to construct a public key with validity dates and a hardware device ID, then output the key as a string. The code uses `GeneratorKeyFactory.getPrivKey` to decode and load the private key from a Base64 string, and `PublicKeyCreationHelpers.getPublicKey2` to build the key with the specified curve, timestamps, and device identifier. The result is printed via `println` after handling success or failure through a `toTry` match.

CCarlos-Augusto

53% match

Loading thumbnail…

Gist 49058de6a5999fad4adf

This example demonstrates how to verify a Keybase identity claim by displaying the signed JSON statement and its PGP signature. It shows the exact data structure and cryptographic proof needed to authenticate a GitHub account, including the public key fingerprint and the signed payload. The visualization uses the `crypto` module to verify the PGP signature and the `d3.forceSimulation` layout to arrange the related key pairs and hash chains. The code renders the signature blocks and key metadata with `d3.select` and `d3.geoPath`, though no map is involved; instead, it presents the raw text and hash values for audit.

PPhilippe Rivière

53% match