197g / 197g/oxide-auth

JWT and JWE compatible Self-Encoded Access Tokens

Offen
#7 8 Kommentare 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
feature
Vorherrschende Sprache
Rust
Sterne
783
Forks
102
PR-Merge-Kennzahlen
Keine gemergten PRs in 30 T.

Beschreibung

Feature
=========

To ensure compatibility and transparency, the self encoded access tokens should be structured based on an open standard, such as [JWT][JWT]. Since private data is needed for several potential extensions, encryption with [JWE][JWE] should also be possible.

This should ultimately lead to better interoperability with clients and might improve debugging as supporting tools etc. are developed independently.

Tracking pull request
--------

- [ ] A pull request does not yet exist

[JWT]: https://tools.ietf.org/html/rfc7519
[JWE]: https://tools.ietf.org/html/rfc7516

Beitragsleitfaden

Beitragsleitfaden öffnen

Rechercherichtung

The issue proposes implementing JWT and JWE standards for self-encoded access tokens. Start by examining the current token handling code in the codebase, likely in modules related to token generation and validation. Review the RFCs linked (RFC 7519 for JWT, RFC 7516 for JWE) to understand the standards. Look for existing tests for tokens to see the expected behavior. 'Done' means tokens are generated and validated according to these standards, with encryption support.

Vom Indexierungsmodell aus dem Issue-Text verfasst.

Bewertung

Tech-Stack
rust
Bereich
authentication, backend-api-design, security
Issue-Typ
Feature
Schwierigkeit
5/5
Geschätzter Aufwand
Über eine Woche
Aktivitätsstatus
Veraltet
Klarheit
Größtenteils klar
Anfängerfreundlichkeit
25/100

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.