obsigil 0.4.0

A shared-secret JWT alternative: a mandate-token format splitting a public, advisory manifest from a secret-sealed, authenticated mandate (AES-SIV / AES-GCM-SIV), with fields in canonical CBOR
Documentation
1
2
3
4
5
6
7
8
9
10
11
12
{"encoding": "b64", "manifest": {"alg": "0", "octets": "a1246c617574682e6578616d706c65", "fields": {"iss": "auth.example"}}, "mandate": {"alg": "0", "octets": "a22050019ed29a378d72f0b4624929cd2bfcad211aee6b2800", "fields": {"exp": 4000000000, "tid": "019ed29a-378d-72f0-b462-4929cd2bfcad"}}, "token": "Ifjt1gPO2S2soNJQZjtP8Q8zDe5zvPxl2D2OuejeOQ0.0XEGe0T5Vih7NhiJsXhrEuLHX7SqEoSOY4PSx91evs1qMZav-laAa5Os"}
{"encoding": "hex", "manifest": {"alg": "0", "octets": "a1246c617574682e6578616d706c65", "fields": {"iss": "auth.example"}}, "mandate": {"alg": "0", "octets": "a22050019ed29a378d72f0b4624929cd2bfcad211aee6b2800", "fields": {"exp": 4000000000, "tid": "019ed29a-378d-72f0-b462-4929cd2bfcad"}}, "token": "21f8edd603ced92daca0d250663b4ff10f330dee73bcfc65d83d8eb9e8de390~05c419ed13e558a1ecd86226c5e1ac4b8b1d7ed2a84a12398e0f4b1f757afb35a8c65abfe95a01ae4eb"}
{"encoding": "b64", "manifest": {"alg": "0", "octets": "a1246c617574682e6578616d706c65", "fields": {"iss": "auth.example"}}, "mandate": {"alg": "1", "octets": "a22050019ed29a378d72f0b4624929cd2bfcad211aee6b2800", "fields": {"exp": 4000000000, "tid": "019ed29a-378d-72f0-b462-4929cd2bfcad"}}, "token": "Ifjt1gPO2S2soNJQZjtP8Q8zDe5zvPxl2D2OuejeOQ0.13Vf4Q2puUBZffZMyRlfOxen1QHWJCYiJCrpNsFCdPK0mb34pC3gt204"}
{"encoding": "b64", "manifest": {"alg": "1", "octets": "a1246c617574682e6578616d706c65", "fields": {"iss": "auth.example"}}, "mandate": {"alg": "1", "octets": "a22050019ed29a378d72f0b4624929cd2bfcad211aee6b2800", "fields": {"exp": 4000000000, "tid": "019ed29a-378d-72f0-b462-4929cd2bfcad"}}, "token": "K9T3fkaNk9TdpcAEQPeq18zqKMrVlma8yzeEaJrF2Q1.13Vf4Q2puUBZffZMyRlfOxen1QHWJCYiJCrpNsFCdPK0mb34pC3gt204"}
{"encoding": "b64", "manifest": {"alg": "0", "octets": "a1246c617574682e6578616d706c65", "fields": {"iss": "auth.example"}}, "token": "Ifjt1gPO2S2soNJQZjtP8Q8zDe5zvPxl2D2OuejeOQ0."}
{"encoding": "b64", "mandate": {"alg": "0", "octets": "a22050019ed29a378d72f0b4624929cd2bfcad211aee6b2800", "fields": {"exp": 4000000000, "tid": "019ed29a-378d-72f0-b462-4929cd2bfcad"}}, "token": ".0XEGe0T5Vih7NhiJsXhrEuLHX7SqEoSOY4PSx91evs1qMZav-laAa5Os"}
{"encoding": "hex", "mandate": {"alg": "1", "octets": "a22050019ed29a378d72f0b4624929cd2bfcad211aee6b2800", "fields": {"exp": 4000000000, "tid": "019ed29a-378d-72f0-b462-4929cd2bfcad"}}, "token": "~1dd57f8436a6e50165f7d93324657cec5e9f54075890988890aba4db0509d3cad266f7e290b782ddb4e"}
{"encoding": "b64", "manifest": {"alg": "0", "octets": "a2246c617574682e6578616d706c65657468656d65646461726b", "fields": {"iss": "auth.example", "theme": "dark"}}, "mandate": {"alg": "0", "octets": "a52050019ed29a378d72f0b4624929cd2bfcad211aee6b28002282636170696762696c6c696e67236375343264726f6c656561646d696e", "fields": {"exp": 4000000000, "tid": "019ed29a-378d-72f0-b462-4929cd2bfcad", "aud": ["api", "billing"], "sub": "u42", "role": "admin"}}, "token": "-WhixIj8T6kxljCMVsmY0OGOSZh68pQe8a6U9ZuRBjqSnUN96lSHeRFa0.03MK_shWrguB4IXqoTAftVxrdTTvjTNSCRWmActcPDHf__V6pRHvv-O-6wb2PfgOL0W2lkzCYZr-1AoE_1Vi2cs9gFNy1kzI"}
{"encoding": "b64", "manifest": {"alg": "0", "octets": "a2211af4610900246c617574682e6578616d706c65", "fields": {"iss": "auth.example", "exp": 4100000000}}, "mandate": {"alg": "0", "octets": "a32050019ed29a378d72f0b4624929cd2bfcad211aee6b2800246c617574682e6578616d706c65", "fields": {"exp": 4000000000, "tid": "019ed29a-378d-72f0-b462-4929cd2bfcad", "iss": "auth.example"}}, "token": "0rNc0G_73oXeHFCcVMkWdT-5IVeMrkU5JK5jHWOHpgP3o110Lw0.0Oqqg5FpHFLFgrW8DwTxuMNkN-FOIubZ7dHRyz1XTLeBl4U5cPVoFgHSG9U9VoDM6bkjYCtjXaA"}
{"encoding": "b64", "manifest": {"alg": "0", "octets": "a1246f697373c3bc65722e6578616d706c65", "fields": {"iss": "issüer.example"}}, "mandate": {"alg": "0", "octets": "a32050019ed29a378d72f0b4624929cd2bfcad211aee6b28002366c3b16fc3b16f", "fields": {"exp": 4000000000, "tid": "019ed29a-378d-72f0-b462-4929cd2bfcad", "sub": "ñoño"}}, "token": "Xi1s0_87WdgtDXaQCgigwBsf5nRWYam9c9_C8sog8B3YHg0.09F9CVyPk5V1HrywRIMTsZhxZTuFoNbWXE_efORQgesGys4D4STrSjdH7cCY8YLnmGQ"}
{"encoding": "hex", "manifest": {"alg": "0", "octets": "a1246c617574682e6578616d706c65", "fields": {"iss": "auth.example"}}, "mandate": {"alg": "1", "octets": "a42050019ed29a378d72f0b4624929cd2bfcad211aee6b2800236375343264726f6c656561646d696e", "fields": {"exp": 4000000000, "tid": "019ed29a-378d-72f0-b462-4929cd2bfcad", "sub": "u42", "role": "admin"}}, "token": "21f8edd603ced92daca0d250663b4ff10f330dee73bcfc65d83d8eb9e8de390~100bd13ab898c2a94cae44ee81bd409dc3eda22691beab02bcbc65e0338ddfd3691893ff840577d789b9c5298945971b982fb66302f6cad0bec"}
{"encoding": "b64", "mandate": {"alg": "0", "octets": "a32050019ed29a378d72f0b4624929cd2bfcad211aee6b28006573636f7265f93e00", "fields": {"exp": 4000000000, "tid": "019ed29a-378d-72f0-b462-4929cd2bfcad", "score": 1.5}}, "token": ".0Ba9QyGXNTTT6AL74yPpZs0o8HjngGcN8Lbc1-o35z1By1DGNk2mE4lkr-tJezhpRifo"}