cabal-version:       2.2
name:                jose
version:             0.12
synopsis:
  JSON Object Signing and Encryption (JOSE) and JSON Web Token (JWT) library
description:
  .
  Implementation of JSON Object Signing and Encryption
  (JOSE) and JSON Web Token (JWT; RFC 7519).
  .
  The JSON Web Signature (JWS; RFC 7515) implementation is complete.
  .
  EdDSA signatures (RFC 8037) and secp256k1 (RFC 8812) are supported.
  .
  JWK Thumbprint (RFC 7638) is supported.
  .
  JSON Web Encryption (JWE; RFC 7516) is not yet implemented.
  .
  The __ECDSA implementation is vulnerable to timing attacks__ and
  should only be used for verification.

homepage:            https://github.com/frasertweedale/hs-jose
bug-reports:         https://github.com/frasertweedale/hs-jose/issues
license:             Apache-2.0
license-file:        LICENSE
extra-source-files:
  test/data/fido.jwt
extra-doc-files:
  CHANGELOG.md
  README.md
author:              Fraser Tweedale
maintainer:          frase@frase.id.au
copyright:           Copyright (C) 2013-2025  Fraser Tweedale
category:            Cryptography
build-type:          Simple
tested-with:
  GHC ==9.6.7 || ==9.8.4 || ==9.10.2 || ==9.12.2

flag demos
  description: Build demonstration programs
  default: False

common common
  default-language: GHC2021
  default-extensions: LambdaCase
  ghc-options:
    -Wall
    -Widentities
    -Wincomplete-record-updates
    -Wincomplete-uni-patterns
    -Werror=missing-methods
    -Wcompat
    -Wnoncanonical-monad-instances
    -Wredundant-constraints
    -fhide-source-paths
    -Wmissing-export-lists
    -Wpartial-fields
    -Wunused-packages
    -Winvalid-haddock
    -Werror=unicode-bidirectional-format-characters
    -Wimplicit-lift
    -Woperator-whitespace
    -Wredundant-bang-patterns
    -Wredundant-strictness-flags

  build-depends:
    base >= 4.18 && < 5
    , bytestring >= 0.10 && < 0.13
    , lens >= 4.16
    , mtl >= 2.2.1

library
  import: common

  exposed-modules:
    Crypto.JOSE
    Crypto.JOSE.Compact
    Crypto.JOSE.Error
    Crypto.JOSE.Header
    Crypto.JOSE.JWE
    Crypto.JOSE.JWK
    Crypto.JOSE.JWK.Store
    Crypto.JOSE.JWS
    Crypto.JOSE.Types
    Crypto.JWT
    Crypto.JOSE.AESKW
    Crypto.JOSE.JWA.JWK
    Crypto.JOSE.JWA.JWS
    Crypto.JOSE.JWA.JWE
    Crypto.JOSE.JWA.JWE.Alg

  other-modules:
    Crypto.JOSE.TH
    Crypto.JOSE.Types.Internal
    Crypto.JOSE.Types.URI

  build-depends:
    , aeson >= 2.0.1.0 && < 3
    , base64-bytestring >= 1.2.1.0 && < 1.3
    , concise >= 0.1
    , containers >= 0.5.8
    , crypton >= 0.31
    , memory >= 0.7
    , monad-time >= 0.4
    , template-haskell >= 2.12
    , text >= 1.1
    , time >= 1.5
    , network-uri >= 2.6
    , crypton-x509 >= 1.7.6

  hs-source-dirs: src

source-repository head
  type: git
  location: https://github.com/frasertweedale/hs-jose.git

test-suite tests
  import: common
  type:           exitcode-stdio-1.0
  hs-source-dirs: test
  main-is:        Test.hs
  other-modules:
    AESKW
    Examples
    JWK
    JWS
    JWT
    Properties
    Types

  build-depends:
    , aeson
    , base64-bytestring
    , containers
    , crypton
    , time
    , network-uri
    , crypton-x509
    , pem

    , concise
    , jose

    , tasty
    , tasty-hedgehog >= 1.2
    , tasty-hspec >= 1.0
    , hedgehog
    , hspec

test-suite perf
  import: common
  type:           exitcode-stdio-1.0
  hs-source-dirs: test
  main-is:        Perf.hs
  build-depends:
    jose

executable jose-example
  import: common
  if !flag(demos)
    buildable: False
  hs-source-dirs: example
  main-is:  Main.hs
  other-modules:
    KeyDB
    JWS

  build-depends:
    aeson
    , text
    , unix
    , jose