Comments (7)
I've poked my colleague (@Sambego) to take a look at this, no promises tho.
from jose.
Hi @neilwashere,
Can you provide the specific JWS, private and public PEMs? I'm happy to look into it.
jwt.io does not do any "backend", your key material and potentially PII containing tokens remain in your browsers, it's using webpacked node-jose
from jose.
Thank @panva. I think this may just be jwt.io as this is the same issue auth0/node-jws#85.
Thanks for the response!
from jose.
@neilwashere please confirm it's fixed with 0.11.0
from jose.
Bottom line
https://tools.ietf.org/html/rfc7518#section-3.5
A key of size 2048 bits or larger MUST be used with this algorithm.
and
The size of the salt value is the same size as
the hash function output. All other algorithm parameters use the
defaults specified in Appendix A.2.3 of RFC 3447.
from jose.
@panva confirmed 0.11.0 working 👍 🎉
from jose.
Thanks.
from jose.
Related Issues (20)
- Bun support ED25519 HOT 1
- Bun bun bun!! HOT 17
- Bun: SyntaxError: Import named 'KeyObject' not found in module 'crypto'. HOT 3
- Mocking URLs with msw/nock doesn't work with named imports. HOT 1
- [ES384] adding a single letter to the signature part causing a successful verification HOT 7
- Type "GetKeyFunction" is present in "types.d.ts" but not exported in "index.d.ts" HOT 1
- Check for `jwk.oth` should also check for `null` value HOT 2
- CryptoKey is not extractable HOT 1
- JWKS Timeout : request timed out HOT 1
- Cannot read properties of undefined (reading 'base64url') HOT 7
- Claims validation should not mutate incoming `requiredClaims` array HOT 6
- jose importSPKI error TypeError: "spki" must be SPKI formatted string HOT 2
- Bun: Export named 'diffieHellman' not found in module 'crypto'. HOT 1
- Maybe slightly tweak the exports? HOT 4
- createLocalJWKSet should not generate a TS error when called with immutable input HOT 2
- Signature verification works in Node.js but fails in Cloudflare Workers HOT 1
- Cloudflare: The requested module 'node:crypto' does not provide an export named 'constants' HOT 5
- Support for AWS Lambda LLRT Runtime HOT 1
- `msw` is unable to intercept JWKS request in node environment due to namespace (`* as`) import HOT 1
- [Usage with Vitest/JSDOM] payload must be an instance of Uint8Array HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from jose.