The jose package

[Tags:apache, library, program, test]

An implementation of the Javascript Object Signing and Encryption (JOSE) and JSON Web Token (JWT; RFC 7519) formats.

The JSON Web Signature (JWS; RFC 7515) implementation is complete.

EdDSA signatures (RFC 8037) are supported (Ed25519 only).

JWK Thumbprint (RFC 7638) is supported (requires aeson >= 0.10).

JSON Web Encryption (JWE; RFC 7516) is not yet implemented.

The __ECDSA implementation is vulnerable to timing attacks__ and should only be used for verification.


[Skip to Readme]

Properties

Versions 0.1.26.0, 0.1.27.0, 0.2.31.0, 0.2.33.0, 0.2.38.0, 0.2.38.1, 0.3.38.0, 0.3.41.0, 0.3.41.1, 0.3.41.2, 0.4.0.0, 0.4.0.1, 0.4.0.2, 0.4.0.3, 0.5.0.0, 0.5.0.1, 0.5.0.2, 0.5.0.3, 0.6.0.0, 0.6.0.1
Dependencies aeson (>=0.8.0.1), attoparsec, base (==4.*), base64-bytestring (==1.0.*), bifunctors (>=4.0), bytestring (==0.10.*), concise (>=0.1), containers (>=0.5), cryptonite (>=0.7), jose, lens (>=4.3), memory (>=0.7), monad-time (>=0.1), mtl (>=2), network-uri (>=2.6), QuickCheck (>=2), quickcheck-instances, safe (>=0.3), semigroups (>=0.15), template-haskell (>=2.4), text (>=1.1), time (>=1.5), unordered-containers (==0.2.*), vector, x509 (>=1.4) [details]
License Apache-2.0
Copyright Copyright (C) 2013, 2014, 2015, 2016, 2017 Fraser Tweedale
Author Fraser Tweedale
Maintainer frase@frase.id.au
Category Cryptography
Home page https://github.com/frasertweedale/hs-jose
Bug tracker https://github.com/frasertweedale/hs-jose/issues
Source repository head: git clone https://github.com/frasertweedale/hs-jose.git
Uploaded Sat Apr 22 08:48:28 UTC 2017 by frasertweedale
Distributions LTSHaskell:0.5.0.3, NixOS:0.6.0.0, Stackage:0.6.0.1, Tumbleweed:0.5.0.2
Downloads 2100 total (180 in the last 30 days)
Votes
0 []
Status Docs available [build log]
Last success reported on 2017-04-22 [all 1 reports]

Modules

[Index]

Downloads

Maintainer's Corner

For package maintainers and hackage trustees

Readme for jose

Readme for jose-0.6.0.1

jose - Javascript Object Signing and Encryption & JWT (JSON Web Token)

jose is a Haskell implementation of Javascript Object Signing and Encryption and JSON Web Token.

The JSON Web Signature (JWS; RFC 7515) implementation is complete. JSON Web Encryption (JWE; RFC 7516) is not yet implemented.

EdDSA signatures (RFC 8037) are supported (Ed25519 only).

The ECDSA implementation is vulnerable to timing attacks and should therefore only be used for verification.

JWK Thumbprint (RFC 7638) is supported (requires aeson >= 0.10).

Contributions are welcome.