com.github.sikt-no.clj-jwt — com.github.sikt-no/clj-jwt 0.5.98

jwtregex clj

keystore-atom clj

resolve-private-key clj

resolve-public-key clj

(resolve-public-key jwks-url jwt-header)

Returns java.security.PublicKey given jwks-url and :kid in jwt-header. If no key is found refreshes

scopes clj

(scopes claims)

Given the claims from unsign returns the jwt scope as a set of strings.

For a jwt without scope, an empty set will be returned.

sign clj

(sign jwks-url kid claims)

(sign jwks-url kid claims options)

Given jwks-url, claims and optionally opts signs claims and returns a token. Uses the private key in the jwks to sign. Opts are the same as buddy-sign.jwt/sign.

unsign clj

(unsign jwks-url token)

(unsign jwks-url
        token
        {:keys [keystore now-ms allow-refresh-after-ms]
         :or {keystore keystore-atom
              now-ms (System/currentTimeMillis)
              allow-refresh-after-ms 60000}
         :as opts})

Given jwks-url, token, and optionally opts validates and returns the claims of the given json web token. Opts are the same as buddy-sign.jwt/unsign.