http://hg.omfa.de/prosody-hg/ en-us prosody-hg: util/paseto.lua history util/paseto.lua revision history util: Prefix module imports with prosody namespace http://hg.omfa.de/prosody-hg/log/d10957394a3c/util/paseto.lua Kim Alvefur <zash@zash.se> Fri, 17 Mar 2023 16:23:16 +0100 util.paseto: Add support for v3.local tokens http://hg.omfa.de/prosody-hg/log/33d902b093f0/util/paseto.lua Matthew Wild <mwild1@gmail.com> Fri, 13 Jan 2023 14:38:05 +0000 util.paseto: Fix omitted parameter http://hg.omfa.de/prosody-hg/log/7db1c1da7bfd/util/paseto.lua Matthew Wild <mwild1@gmail.com> Fri, 13 Jan 2023 14:36:36 +0000 util.paseto: Stricter base64 decoding, as per spec http://hg.omfa.de/prosody-hg/log/2e71b76ac299/util/paseto.lua Matthew Wild <mwild1@gmail.com> Fri, 13 Jan 2023 14:35:01 +0000 util.paseto: Do strict type check in pae() function http://hg.omfa.de/prosody-hg/log/0b68b021ce46/util/paseto.lua
Fixes a test failure on Lua 5.4 where ipairs("") does not produce an
error.]]> Kim Alvefur <zash@zash.se> Mon, 11 Jul 2022 18:48:57 +0200 util.paseto: Drop custom wrappers around key objects http://hg.omfa.de/prosody-hg/log/52eead170bb8/util/paseto.lua
The PASETO spec recommends - no, *requires* - that implementations enforce
type safety for keys, and e.g. do not pass them around as arbitrary byte
strings. Typed wrapper objects are recommended.

I originally followed this advice when starting the lib. However, key wrapping
and type safety is now also a feature of util.crypto. All we're doing is
duplicating it unnecessarily with this additional wrapper code.]]> Matthew Wild <mwild1@gmail.com> Mon, 11 Jul 2022 14:30:39 +0100 util.paseto: Export similar API to new util.jwt for ease and consistency http://hg.omfa.de/prosody-hg/log/9e9f158d6699/util/paseto.lua Matthew Wild <mwild1@gmail.com> Mon, 11 Jul 2022 14:09:16 +0100 util.paseto: Error early on invalid keys http://hg.omfa.de/prosody-hg/log/2dbb3335cd34/util/paseto.lua Matthew Wild <mwild1@gmail.com> Mon, 11 Jul 2022 14:08:55 +0100 util.paseto: Fix to decode footer before comparison http://hg.omfa.de/prosody-hg/log/b3f7c77c1f08/util/paseto.lua Matthew Wild <mwild1@gmail.com> Mon, 11 Jul 2022 13:51:39 +0100 util.paseto: Implementation of PASETO v4.public tokens http://hg.omfa.de/prosody-hg/log/26a004c96ef8/util/paseto.lua
PASETO provides an alternative to JWT with the promise of fewer implementation
pitfalls. The v4.public algorithm allows asymmetric cryptographically-verified
token issuance and validation.

In summary, such tokens can be issued by one party and securely verified by
any other party independently using the public key of the issuer. This has a
number of potential applications in a decentralized network and ecosystem such
as XMPP. For example, such tokens could be combined with XEP-0317 to allow
hats to be verified even in the context of a third-party MUC service.]]> Matthew Wild <mwild1@gmail.com> Fri, 24 Jun 2022 17:03:28 +0100