JWS JSON Serialization

[StevenDevooght]

Is JWS JSON serialization as described in RFC 7515 supported by this library?

[dvsekhvalnov]

Hi @StevenDevooght ,

nope, library supports only RFC 7516 at the moment. Somewhat similar but for encrypted payloads.

I'd interested to hear your use case though :) Is not that i have immediate plans to add RFC 7515, but can consider it too or you can always do PR.

[StevenDevooght]

Hi,

We have to integrate with a government web service and they require us to first sign (JWS) & then encrypt (JWE) our payload:

• JWS: must use JSON serialization mode, not flattened
• JWE: must use JSON serialization mode, flattened

I think the requirements for JWE are met. We are just missing the JSON serialization part for JWS. If I find the time I'd happy to submit a pull request.

[dvsekhvalnov]

yeah, JWE support quite good.

PRs always welcome :) just word of caution, it can take some time to review/merge, especially for bigger ones (JWE took around month for reference). Plus hell a lot of changes in json web key branch at the moment.

[RufusJWB]

I'd interested to hear your use case though :)

I'm writing a ACME client in .net and ACME uses JWS

[mjhaugsdal]

@StevenDevooght Some time ago I made a demo client by combining https://github.com/alexzautke/JWS and jose-jwt. The message was accepted by my server (written in java with CXF)