Comments (2)
Hi @Rust-Galt,
It's true that currently you can't set the wpk
claim in the footer. The reason is that, the PASERK "wrapped" formats that are safe to put in the footer, have not been implemented yet. If we were to allow users to set the wpk
claim to anything, they might inadvertently leak some key material in there.
The way we solve this for the kid
claim currently, is we have a Id
PASERK struct that can be put in the footer, as you mention with key_id()
. I'd prefer we keep it the same if we're to add wpk
possibility.
So I guess my question is, are you asking that some specific variant, that can be put into wpk
field of the footer, be added (seal
, local-wrap
or secret-wrap
)? Or do you already have some functionality that implements those wrapped-formats?
If the latter is the case, maybe you are interested in contributing/getting it added to this library?
from pasetors.
Hi @brycx,
Very reasonable choice and now I understand. I have played around with the various PASETO/PASERK crates and each have some features missing here and there. And yours seems the most clean and featured one. @conradludgate rusty_paserk
seems to support the various PASERK formats.
So I see there is no real issue here. I just wanted to ask about it like this. Greetings
from pasetors.
Related Issues (20)
- Update test vectors for `v3.public`
- Add `generate()` for `AsymmetricKeyPair` HOT 1
- Provide `TryFrom<AsymmetricSecretKey> for AsymmetricPublicKey<>` HOT 14
- Ability to extract parts of untrusted tokens HOT 1
- Switch from `ed25519-dalek` to `ed25519-compact` HOT 1
- Why `TryFrom<String>` not `TryFrom<&str>`? HOT 2
- `AsymmetricPublicKey` does not implement clone? HOT 2
- Switch to RustCrypto `p384` once `rust-p384` changes have been merged HOT 2
- Update PASERK test vectors HOT 1
- `0.5.0` tracker HOT 2
- Panic when running in WASM HOT 9
- Public key oracle in `AsymmetricSecretKey::from(bytes: &[u8])` for ed25519
- Define the version of GH Actions by git commit
- the trait `Clone` is not implemented for `AsymmetricSecretKey<_>` HOT 3
- Implementation issues HOT 4
- Add `cargo-semver-checks` to CI
- Maybe Claims::new() should accept a Duration parameter? HOT 4
- Relax payload from_utf8 behind flag HOT 3
- Change `message` to be of type `&str` for `LocalToken` and `PublicToken`
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from pasetors.