jwt test

Author: irr

jwt/go.mod

@@ -0,0 +1,5 @@
+module jwt-test
+
+go 1.15
+
+require github.com/dgrijalva/jwt-go v3.2.0+incompatible

jwt/go.sum

@@ -0,0 +1,3 @@
+github.com/dgrijalva/jwt-go v1.0.2 h1:KPldsxuKGsS2FPWsNeg9ZO18aCrGKujPoWXn2yo+KQM=
+github.com/dgrijalva/jwt-go v3.2.0+incompatible h1:7qlOGliEKZXTDg6OTjfoBKDXWrumCAMpl/TFQ4/5kLM=
+github.com/dgrijalva/jwt-go v3.2.0+incompatible/go.mod h1:E3ru+11k8xSBh+hMPgOLZmtrrCbhqsmaPHjLKYnJCaQ=

jwt/jwt-test.go

@@ -0,0 +1,124 @@
+package main
+
+import (
+	"fmt"
+	"io/ioutil"
+	"log"
+	"strings"
+	"time"
+
+	jwt "github.com/dgrijalva/jwt-go"
+)
+
+// SM ...
+const (
+	SM     = "RS512"
+	SECRET = "anypassword"
+)
+
+// CustomClaims ...
+type CustomClaims struct {
+	Foo string `json:"foo"`
+	jwt.StandardClaims
+}
+
+// Generate keys using: https://www.csfieldguide.org.nz/en/interactives/rsa-key-generator/
+// Keysize: 1024 and PKCS #8 (base64)
+func generateRSAToken(prv string) (string, error) {
+	keyData, err := ioutil.ReadFile(prv)
+	if err != nil {
+		return "", err
+	}
+
+	key, err := jwt.ParseRSAPrivateKeyFromPEM(keyData)
+	if err != nil {
+		return "", err
+	}
+
+	token := jwt.New(jwt.GetSigningMethod(SM))
+	token.Claims = CustomClaims{
+		"bar",
+		jwt.StandardClaims{
+			ExpiresAt: time.Now().Add(time.Hour * 24).Unix(),
+			Issuer:    "test",
+		},
+	}
+
+	return token.SignedString(key)
+}
+
+func verifyRSAToken(token, pub string) (bool, error) {
+	keyData, err := ioutil.ReadFile(pub)
+	if err != nil {
+		return false, err
+	}
+
+	key, err := jwt.ParseRSAPublicKeyFromPEM(keyData)
+	if err != nil {
+		return false, err
+	}
+
+	parts := strings.Split(token, ".")
+	method := jwt.GetSigningMethod(SM)
+	err = method.Verify(strings.Join(parts[0:2], "."), parts[2], key)
+	if err != nil {
+		return false, nil
+	}
+
+	return true, nil
+}
+
+func generateHASHToken(pwd string) (string, error) {
+	claims := CustomClaims{
+		"bar",
+		jwt.StandardClaims{
+			ExpiresAt: time.Now().Add(time.Hour * 24).Unix(),
+			Issuer:    "test",
+		},
+	}
+	at := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
+	return at.SignedString([]byte(pwd))
+}
+
+func verifyHASHToken(token, pwd string) (bool, error) {
+	_, err := jwt.Parse(token, func(t *jwt.Token) (interface{}, error) {
+		if _, ok := t.Method.(*jwt.SigningMethodHMAC); !ok {
+			return nil, fmt.Errorf("unexpected signing method: %v", t.Header["alg"])
+		}
+		return []byte(pwd), nil
+	})
+	return err == nil, err
+}
+
+func main() {
+	pub := "./pub.key"
+	prv := "./prv.key"
+
+	token, err := generateRSAToken(prv)
+	if err != nil {
+		log.Fatal(err)
+	}
+
+	fmt.Printf("RSA token: %s\n", token)
+
+	valid, err := verifyRSAToken(token, pub)
+	if err != nil {
+		log.Fatal(err)
+	}
+
+	fmt.Printf("RSA token validation: %v (%v)\n", valid, err)
+
+	token, err = generateHASHToken(SECRET)
+	if err != nil {
+		log.Fatal(err)
+	}
+
+	fmt.Printf("HASH token: %s\n", token)
+
+	valid, err = verifyHASHToken(token, SECRET)
+	if err != nil {
+		log.Fatal(err)
+	}
+
+	fmt.Printf("RSA token validation: %v (%v)\n", valid, err)
+}

jwt/prv.key

@@ -0,0 +1,16 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

jwt/pub.key

@@ -0,0 +1,6 @@
+-----BEGIN PUBLIC KEY-----
+MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCAbpRA737/S4IK9JjvBNCXB8Tq
+9dQKOTaKrYU1/JP1kw3G78ofJh3SVROLWNcsegv3mGMw7yZQt4AfviJEbgCMoinf
+vswbHDrmdF2Q6h8JHxMKoGdGVKqnMAcqWz8VtviGH6gis/OKpBa8J9V8G7wMeYcW
+ZdW/MihS9XkOiZaFTQIDAQAB
+-----END PUBLIC KEY-----