co.gaiwan.oak.domain.jwt — co.gaiwan/oak 0.5.227-rc

Utility functions for creating/handling JWTs and JWT claims.

Both access tokens and ID tokens.

access-token-claims clj

(access-token-claims {:keys [issuer identity-id client-id now scope]
                      :or {now (System/currentTimeMillis)}})

Generate JWT claims for an access token

at-exp clj

(at-exp now)

at-hash clj

(at-hash access-token hash-alg)

Compute the at-hash claim, which is base64url(leftmostHalf(hash(access-token)))

expired? clj

(expired? claims)

iat clj

(iat now)

id-exp clj

(id-exp now)

id-token-claims clj

(id-token-claims db
                 {:keys [issuer identity-id client-id now auth-time hash-alg
                         access-token scope]})

Generate JWT claims for an id token

parse-verify clj

(parse-verify db token)

Lookup the JWK based on the key id (kid) in the token header, then check the signature, and return the claims map

update-at-claims clj

(update-at-claims claims {:keys [now]})

update-id-claims clj

(update-id-claims claims {:keys [now hash-alg access-token] :as opts})