pyjwkest

import json from jwkest.jwk import RSAKey, generate_key from jwkest.jws import JWS # 1. Generate an RSA key pair for signing and verification print("Generating RSA key pair...") rsa_key = generate_key(alg='RS256', size=2048) private_jwk = rsa_key.export_private() public_jwk = rsa_key.export_public() print("Private JWK (fragment):", {k: v for k, v in private_jwk.items() if k != 'd' and len(str(v)) < 50}) print("Public JWK (fragment):", {k: v for k, v in public_jwk.items() if len(str(v)) < 50}) # 2. Define JWT claims claims = { "iss": "example.com", "aud": "client.example.org", "sub": "user123", "exp": 1893456000 # January 1, 2030 } print("\nClaims to sign:", claims) # 3. Create a JWS object and sign the claims _jws_signer = JWS(json.dumps(claims)) signed_jwt = _jws_signer.sign(private_jwk) print("\nSigned JWT:", signed_jwt) # 4. Verify the JWT using the public key print("\nVerifying JWT...") _jws_verifier = JWS(signed_jwt) try: # Pass the public key for verification verified_payload_str = _jws_verifier.verify(jwk=public_jwk) verified_payload = json.loads(verified_payload_str) print("Verification successful!") print("Verified payload:", verified_payload) except Exception as e: print(f"Verification failed: {e}")