JWT and JWE compatible Self-Encoded Access Tokens
- Vorherrschende Sprache
- Rust
- Sterne
- 783
- Forks
- 102
- PR-Merge-Kennzahlen
- Keine gemergten PRs in 30 T.
Beschreibung
Feature
=========
To ensure compatibility and transparency, the self encoded access tokens should be structured based on an open standard, such as [JWT][JWT]. Since private data is needed for several potential extensions, encryption with [JWE][JWE] should also be possible.
This should ultimately lead to better interoperability with clients and might improve debugging as supporting tools etc. are developed independently.
Tracking pull request
--------
- [ ] A pull request does not yet exist
[JWT]: https://tools.ietf.org/html/rfc7519
[JWE]: https://tools.ietf.org/html/rfc7516
Beitragsleitfaden
Rechercherichtung
The issue proposes implementing JWT and JWE standards for self-encoded access tokens. Start by examining the current token handling code in the codebase, likely in modules related to token generation and validation. Review the RFCs linked (RFC 7519 for JWT, RFC 7516 for JWE) to understand the standards. Look for existing tests for tokens to see the expected behavior. 'Done' means tokens are generated and validated according to these standards, with encryption support.
Vom Indexierungsmodell aus dem Issue-Text verfasst.
Bewertung
- Tech-Stack
- rust
- Bereich
- authentication, backend-api-design, security
- Issue-Typ
- Feature
- Schwierigkeit
- 5/5
- Geschätzter Aufwand
- Über eine Woche
- Aktivitätsstatus
- Veraltet
- Klarheit
- Größtenteils klar
- Anfängerfreundlichkeit
- 25/100