Oct 4, 2024 · Oct 1, 2024 · Oct 2, 2024 · Oct 2, 2024 · Oct 2, 2024 · Oct 2, 2024
diff --git a/coderd/jwtutils/jwe.go b/coderd/jwtutils/jwe.go
 return base64.RawURLEncoding.EncodeToString(serialized), nil
 }

 // DecryptOptions are options for decrypting a JWE.
 type DecryptOptions struct {
 RegisteredClaims jwt.Expected

 // The following should only be used for JWEs.
 KeyAlgorithm               jose.KeyAlgorithm
 ContentEncryptionAlgorithm jose.ContentEncryption
 }

 // Decrypt decrypts the token using the provided key. It unmarshals into the provided claims.
 func Decrypt(ctx context.Context, d DecryptKeyer, token string, claims Claims, opts ...func(*ParseOptions)) error {
 options :=ParseOptions{
 func Decrypt(ctx context.Context, d DecryptKeyer, token string, claims Claims, opts ...func(*DecryptOptions)) error {
 options :=DecryptOptions{
 RegisteredClaims: jwt.Expected{
 Time: time.Now(),
 },
diff --git a/coderd/jwtutils/jws.go b/coderd/jwtutils/jws.go
 "golang.org/x/xerrors"
 )

 const (
 keyIDHeaderKey = "kid"
 )

 // Claims defines the payload for a JWT. Most callers
 // should embed jwt.Claims
 type Claims interface {
 Validate(jwt.Expected) error
 }

 const (
 signingAlgo = jose.HS512
 )
 return compact, nil
 }

 // VerifyOptions are options for verifying a JWT.
 type VerifyOptions struct {
 RegisteredClaims jwt.Expected

 // The following are only used for JWSs.
 SignatureAlgorithm jose.SignatureAlgorithm
 }

 // Verify verifies that a token was signed by the provided key. It unmarshals into the provided claims.
 func Verify(ctx context.Context, v VerifyKeyer, token string, claims Claims, opts ...func(*ParseOptions)) error {
 options :=ParseOptions{
 func Verify(ctx context.Context, v VerifyKeyer, token string, claims Claims, opts ...func(*VerifyOptions)) error {
 options :=VerifyOptions{
 RegisteredClaims: jwt.Expected{
 Time: time.Now(),
 },
diff --git a/coderd/jwtutils/jwt.go b/coderd/jwtutils/jwt.go
Original file line number	Diff line number	Diff line change
Expand Up		@@ -62,9 +62,18 @@ func Encrypt(ctx context.Context, e EncryptKeyer, claims Claims) (string, error)
		return base64.RawURLEncoding.EncodeToString(serialized), nil
		}

		// DecryptOptions are options for decrypting a JWE.
		type DecryptOptions struct {
		RegisteredClaims jwt.Expected

		// The following should only be used for JWEs.
		KeyAlgorithm jose.KeyAlgorithm
		ContentEncryptionAlgorithm jose.ContentEncryption
		}

		// Decrypt decrypts the token using the provided key. It unmarshals into the provided claims.
		func Decrypt(ctx context.Context, d DecryptKeyer, token string, claims Claims, opts ...func(*ParseOptions)) error {
		options :=ParseOptions{
		func Decrypt(ctx context.Context, d DecryptKeyer, token string, claims Claims, opts ...func(*DecryptOptions)) error {
		options :=DecryptOptions{
		RegisteredClaims: jwt.Expected{
		Time: time.Now(),
		},
Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -11,6 +11,16 @@ import (
		"golang.org/x/xerrors"
		)

		const (
		keyIDHeaderKey = "kid"
		)

		// Claims defines the payload for a JWT. Most callers
		// should embed jwt.Claims
		type Claims interface {
		Validate(jwt.Expected) error
		}

		const (
		signingAlgo = jose.HS512
		)
Expand DownExpand Up		@@ -60,9 +70,17 @@ func Sign(ctx context.Context, s SignKeyer, claims Claims) (string, error) {
		return compact, nil
		}

		// VerifyOptions are options for verifying a JWT.
		type VerifyOptions struct {
		RegisteredClaims jwt.Expected

		// The following are only used for JWSs.
sreya marked this conversation as resolved. Show resolvedHide resolved
		SignatureAlgorithm jose.SignatureAlgorithm
		}

		// Verify verifies that a token was signed by the provided key. It unmarshals into the provided claims.
		func Verify(ctx context.Context, v VerifyKeyer, token string, claims Claims, opts ...func(*ParseOptions)) error {
		options :=ParseOptions{
		func Verify(ctx context.Context, v VerifyKeyer, token string, claims Claims, opts ...func(*VerifyOptions)) error {
		options :=VerifyOptions{
		RegisteredClaims: jwt.Expected{
		Time: time.Now(),
		},
Expand Down