ricardo-dlc · August 27, 2020 15:39 · Aug 27, 2020 · May 23, 2020 · May 3, 2020
diff --git a/instructions.md b/instructions.md
@@ -4,7 +4,7 @@ First you need to generate a pair of keys. Generate the private as follows:
 openssl genrsa -out privatekey.pem 4096
 ```
 
-Then generate the public one using the private generated previuosly:
+Then generate the public one using the private generated previously:
 
 ```console
 openssl req -new -x509 -key privatekey.pem -out publickey.cer

diff --git a/app.js b/app.js
@@ -2,10 +2,11 @@ const jose = require('jose');
 const fs = require('fs');
 const path = require("path");
 
-// main
+// project
 // ├── src
 // │   └── app.js
-// ├── privatekey.pub
+// ├── package.json
+// └── privatekey.pub
 // └── publickey.cer
 
 const privateKey = jose.JWK.asKey(fs.readFileSync(path.resolve(__dirname, '../privatekey.pem')));

diff --git a/create-private-public-key.txt b/create-private-public-key.txt
@@ -1,2 +0,0 @@
-openssl genrsa -out privatekey.pem 4096
-openssl req -new -x509 -key privatekey.pem -out publickey.cer

diff --git a/instructions.md b/instructions.md
@@ -0,0 +1,24 @@
+First you need to generate a pair of keys. Generate the private as follows:
+
+```console
+openssl genrsa -out privatekey.pem 4096
+```
+
+Then generate the public one using the private generated previuosly:
+
+```console
+openssl req -new -x509 -key privatekey.pem -out publickey.cer
+```
+
+Then proceed to install node dependencies, execute the following in project root directory:
+
+```console
+npm install
+```
+
+
+Finally run:
+
+```console
+npm start
+```
diff --git a/package.json b/package.json
@@ -0,0 +1,15 @@
+{
+  "name": "use-of-jose",
+  "version": "1.0.0",
+  "description": "Use of JOSE library and private/public keys",
+  "main": "src/app.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "start" "node src/app"
+  },
+  "author": "Ricardo de la Cruz <[email protected]>",
+  "license": "ISC",
+  "dependencies": {
+    "jose": "^1.27.0"
+  }
+}
diff --git a/app.js b/app.js
@@ -0,0 +1,54 @@
+const jose = require('jose');
+const fs = require('fs');
+const path = require("path");
+
+// main
+// ├── src
+// │   └── app.js
+// ├── privatekey.pub
+// └── publickey.cer
+
+const privateKey = jose.JWK.asKey(fs.readFileSync(path.resolve(__dirname, '../privatekey.pem')));
+const publicKey = jose.JWK.asKey(fs.readFileSync(path.resolve(__dirname, '../publickey.cer')));
+
+// Sign
+let jwt = jose.JWT.sign(
+  { 'urn:example:claim': 'foo' },
+  privateKey,
+  {
+    algorithm: 'RS512',
+    expiresIn: '1 min',
+    header: {
+      typ: 'JWT'
+    },
+    audience: 'urn:example:client_id',
+    issuer: 'https://op.example.com'
+  }
+);
+
+try {
+  // Verify JWT and also verify payload content
+  let payload = jose.JWT.verify(
+    jwt,
+    publicKey,
+    {
+      issuer: 'https://op.example.com',
+      audience: 'urn:example:client_id'
+    }
+    );
+    console.log(payload);
+} catch (err) {
+  console.log(err);
+  if (err instanceof jose.errors.JOSEError && err.code === 'ERR_JWT_EXPIRED') {
+    console.log('Expired token');
+  }
+  else if (err instanceof jose.errors.JOSEError && err.code === 'ERR_JWT_MALFORMED') {
+    console.log('Invalid token');
+  }
+  else if (err instanceof jose.errors.JOSEError && err.code === 'ERR_JWT_CLAIM_INVALID') {
+    console.log('Claim invalid');
+  }
+  else {
+    console.log('Unexpected error');
+  }
+};
diff --git a/create-private-public-key.txt b/create-private-public-key.txt
@@ -0,0 +1,2 @@
+openssl genrsa -out privatekey.pem 4096
+openssl req -new -x509 -key privatekey.pem -out publickey.cer
Original file line number	Diff line number	Diff line change
		@@ -1,2 +0,0 @@
		openssl genrsa -out privatekey.pem 4096
		openssl req -new -x509 -key privatekey.pem -out publickey.cer
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		openssl genrsa -out privatekey.pem 4096
		openssl req -new -x509 -key privatekey.pem -out publickey.cer