Nim JWT

https://github.com/yglukhov/nim-jwt
Admin
A Nim implementation of JSON Web Tokens (JWT) providing functionalities for parsing, signing,...
Tokens:586
Snippets:2
Trust Score:9
License:MIT
Update:1 year ago
Show doc for...
Tokens:
Raw
### Request Google API OAuth2 Token with RS256 in Nim

Source: https://github.com/yglukhov/nim-jwt/blob/master/README.md

Example showing how to obtain a Google API OAuth2 access token using a JWT signed with an RS256 algorithm. It constructs the JWT with necessary claims and sends an HTTP POST request.

```nim
import jwt, json, times, httpclient, cgi

const email = "username@api-12345-12345.iam.gserviceaccount.com" # Acquired from google api console
const scope = "https://www.googleapis.com/auth/androidpublisher" # Define needed scope
const privateKey = """
-----BEGIN PRIVATE KEY-----
The key should be Acquired from google api console
-----END PRIVATE KEY-----
"""

var tok = initJWT(
  header = JOSEHeader(alg: RS256, typ: "JWT"),
  claims = toClaims(%*{
  "iss": email,
  "scope": scope,
  "aud": "https://www.googleapis.com/oauth2/v4/token",
  "exp": int(epochTime() + 60 * 60),
  "iat": int(epochTime())
}))

tok.sign(privateKey)

let postdata = "grant_type=" & encodeUrl("urn:ietf:params:oauth:grant-type:jwt-bearer") & "&assertion=" & $tok

proc request(url: string, body: string): string = 
  var client = newHttpClient()
  client.headers = newHttpHeaders({ "Content-Length": $body.len, "Content-Type": "application/x-www-form-urlencoded" })
  result = client.postContent(url, body)
  client.close()

let resp = request("https://www.googleapis.com/oauth2/v4/token", postdata).parseJson()
echo "Access token is: ", resp["access_token"].str

```

--------------------------------

### Sign and Verify JWT with HS256 in Nim

Source: https://github.com/yglukhov/nim-jwt/blob/master/README.md

Demonstrates how to sign a JWT with a shared secret using the HS256 algorithm and subsequently verify its authenticity. Includes setting claims like userId and expiration.

```nim
import jwt, times, json, tables

var secret = "secret"

proc sign(userId: string): string = 
  var token = toJWT(%*{
    "header": {
      "alg": "HS256",
      "typ": "JWT"
    },
    "claims": {
      "userId": userId,
      "exp": (getTime() + 1.days).toUnix()
    }
  })

  token.sign(secret)

  result = $token

proc verify(token: string): bool = 
  try:
    let jwtToken = token.toJWT()
    result = jwtToken.verify(secret, HS256)
  except InvalidToken:
    result = false

proc decode(token: string): string = 
  let jwt = token.toJWT()
  result = $jwt.claims["userId"].node.str

```
Tokens:
Raw