tiny-jwt

Minimal JWT library base on WebCrypto API.

See tests ./src/*.test.ts for the usage.

# generate key in JWK format
tiny-jwt keygen HS256
{
  "key_ops": [
    "sign",
    "verify"
  ],
  "ext": true,
  "kty": "oct",
  "k": "eIlE_krFljjdMaGOEUHqTkvBgknkEQK_Q3VjMHDagJlde-36x1YXfjowvKs8mTSH6gJyml6HvW1qLhG75HOW_g",
  "alg": "HS256"
}

todo

• [x] JWS (json web signature)
  • [x] HMAC (alg = HS256)
  • [x] ECDSA (alg = ES256)
• [x] JWE (json web encryption)
  • [x] AES-GCM (alg = dir, enc = A256GCM)
• [x] support exp
• [ ] more tests
• [x] demo cli (key generation, etc...)
• [ ] demo frontend

references

• JWT https://datatracker.ietf.org/doc/html/rfc7519
• JWS https://datatracker.ietf.org/doc/html/rfc7515
• JWE https://datatracker.ietf.org/doc/html/rfc7516
• JWA https://datatracker.ietf.org/doc/html/rfc7518
• JWK https://datatracker.ietf.org/doc/html/rfc7517
• https://developer.mozilla.org/en-US/docs/Web/API/Web_Crypto_API
• https://nodejs.org/docs/latest-v18.x/api/webcrypto.html
• https://developers.cloudflare.com/workers/runtime-apis/web-crypto/
• https://github.com/hattipjs/hattip/blob/0001d4023eebb27cd6e127952a3ff00a2fdf425b/packages/middleware/session/src/crypto.ts
• https://github.com/remix-run/remix/blob/100ecd3ea686eeec14f17fa908116b74aebdb91c/packages/remix-cloudflare/crypto.ts
• https://github.com/auth0/node-jws/blob/b9fb8d30e9c009ade6379f308590f1b0703eefc3/lib/sign-stream.js
• https://github.com/panva/jose/blob/e2836e6aaaddecde053018884abb040908f186fd/src/runtime/browser/sign.ts