If you're reading this, click HERE
</script>jose
Extensible JOSE library for Scala.
Installation
The dependency is available on Maven Central.
Usage
Pretty simple: make a key, make something to sign, sign it.
<sauce-code repo='blackdoor/jose' lang='scala' file='docs/src/black/door/jose/docs/SampleCode.scala' lines='15:36'
Selecting a JSON implementation
Currently supported JSON libraries:
To add a JSON support, just import or mix in an implementation like import black.door.jose.json.playjson.JsonSupport._.
If your preferred library isn't supported, just implement Mapper implicits (or open an issue to request they be added).
Async key resolution and validation checks
Frequently you will need to dynamically look up a new key from a keyserver based on a JWS header,
or check a centralized cache to see if a token has been revoked.
This is easy to do asynchronously by implementing KeyResolver or JwtValidator.
JwtValidator is a partial function so you can easily chain both sync and async validations.
KeyResolver allows you to return an error in the event that there was a specific reason a key could not be found
(perhaps a key does exist, but it's only for encryption and this token is using it for signing).
JWT validation DSL
There is a handy compile-safe DSL for JWT validation that allows you to indicate if you want to use unregistered claims, and if you want to evaluate synchronously or asynchronously. Its structure looks like this
Jwt
|__ .validate(compactJwt)
|__ .using(keyResolver, etc...)
| |__ .now // validates the JWT synchronously
| |__ .async // returns the validation result in a Future
|__ .apply[UnregisteredClaims]
|__ .using(keyResolver, etc...)
|__ .now // validates the JWT synchronously
|__ .async // returns the validation result in a Future
So for example you could synchronously validate a JWT with some custom claims with
<sauce-code repo='blackdoor/jose' lang='scala' file='docs/src/black/door/jose/docs/SampleCode.scala' lines='64:77'
Not yet implemented:
- JWK serialization partly implemented
- JWE
- RSA signing (RSA signature verification is supported)
- Less common key sizes for ECDSA
- Custom JOSE header parameters (custom JWT claims are supported)