Error when creating a public signer for certificates about jwt HOT 5 CLOSED

Just wanted to drop in and say that this issue occurred for me due to the lack of newlines, as I was trying to pass it in through an environment variable. When I added them back in, this issue went away.

from jwt.

I used .replacingOccurrences(of: "\\n", with: "\n") after private key reading from .env

from jwt.

This appears to be due to passing an X.509 certificate (a PEM blob starting with ------BEGIN CERTIFICATE------) to the public key initializer for RS256, which invokes PEM_read_bio_PUBKEY() - the PUBKEY variant expects a PKCS#8 public key (PEM blob starting with ------BEGIN PUBLIC KEY------, wrapping a SubjectPublicKeyInfo tagged as rsaEncryption and in turn containing an RSAPublicKey). While an X.509v3 certificate does indeed contain a public key, it unfortunately can not be directly parsed as if it were one.

JWTKit should provide a .public(x509:) convenience utility, since extracting a certificate's public key in PKCS#8 PEM form is either a ridiculous ring-around-the-rosy using NIOSSL, or else just painful using BoringSSL directly. However, this is not a bug as such.

from jwt.

Just message for future developers: jWTKit now providing x509 initialization thru .certificate(pem: cert)

from jwt.

Heads up to devs sending push notifications through their servers and omitting the Apple ECP8 Private Key from their code because they made the project public and don't want the key revealed: JWT will scream at you if it doesn't see a proper key passed

func configurePush() throws {
        let appleECP8PrivateKey =
        """
        -----BEGIN PRIVATE KEY-----
           <--- HERE!
        -----END PRIVATE KEY-----
        """
        
        apns.configuration = try .init(
            authenticationMethod: .jwt(
                key: .private(pem: Data(appleECP8PrivateKey.utf8)),
                keyIdentifier: "",
                teamIdentifier: ""
            ),
            topic: "com.rafaelschmitt.MyApp",
            environment: .production
        )
    }

Just comment this code out while you test.

from jwt.