reallyme-jose 0.1.0

JOSE, JWT, JWS, and JWE helpers for ReallyMe identity.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45

// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
//
// SPDX-License-Identifier: Apache-2.0

/// Maximum accepted compact JWS size in bytes.
pub const MAX_COMPACT_JWS_BYTES: usize = 1024 * 1024;

pub(crate) struct CompactJwsParts<'a> {
    pub(crate) protected_header: &'a str,
    pub(crate) payload: &'a str,
    pub(crate) signature: &'a str,
}

pub(crate) fn parse_compact_jws<'a, E>(
    jws: &'a str,
    invalid_compact: E,
) -> Result<CompactJwsParts<'a>, E> {
    if jws.len() > MAX_COMPACT_JWS_BYTES {
        return Err(invalid_compact);
    }

    let mut parts = jws.split('.');
    let Some(protected_header) = parts.next() else {
        return Err(invalid_compact);
    };
    let Some(payload) = parts.next() else {
        return Err(invalid_compact);
    };
    let Some(signature) = parts.next() else {
        return Err(invalid_compact);
    };
    if parts.next().is_some() {
        return Err(invalid_compact);
    }

    Ok(CompactJwsParts {
        protected_header,
        payload,
        signature,
    })
}

pub(crate) fn signing_input(protected_header: &str, payload: &str) -> String {
    format!("{protected_header}.{payload}")
}