yiisoft / auth-jwt Goto Github PK

@rustamwin suggests lcobucci/jwt in this issue from yiisoft/yii-web

yiisoft/yii-web#114 (comment)

The Problem is, we will need version v4.x (php 7.3) but this version is not stable and we don't know, how long it will takes.

• About JWT(JSON Web Tokens [RFC 7519]):
  https://jwt.io

• Yii2 RESTful Web Services Authentication:
  https://www.yiiframework.com/doc/guide/2.0/en/rest-authentication

What steps will reproduce the problem?

composer update

What is the expected result?

Outdated packages are not installed.

What do you get instead?

composer: Package web-token/* is abandoned, you should avoid using it. Use web-token/jwt-library instead.

Additional info

What steps will reproduce the problem?

I am using an RS256 algorithm instead of the (default) HS256 algorithm. RS256 uses a public/private key pair instead of a secret. The TokenManager only implements the possibility to define a secret but not a public or private file path or encryption key.

config/web/auth.php

<?php

declare(strict_types=1);

/** 
 * @var array $params
 */

use Jose\Component\Signature\Algorithm\RS256;
use Yiisoft\Auth\Jwt\TokenManagerInterface;
use Yiisoft\Auth\Jwt\TokenManager;
use Yiisoft\Auth\AuthenticationMethodInterface;
use Yiisoft\Auth\Jwt\JwtMethod;

return [
    TokenManagerInterface::class => [
        '__class' => TokenManager::class,
        '__construct()' => [
             // `secret` not needed for this algorithm, but must be defined for the token manager constructor
            'secret' => $params['yiisoft/auth-jwt']['secret'],
            'algorithms' => [new RS256()]
           // where do i define the public/private key file path or the encryption key?
        ]
    ],
    AuthenticationMethodInterface::class => JwtMethod::class
];

What is the expected result?

A possibility to define a public and private key file path for the token manager and the secret not to be a default

What do you get instead?

No possibility to use a JWT with RS256 algorithm

Additional info

Related issue: yiisoft/auth#69