badjwt

README

badjwt

A deliberately flawed JWT implementation.

Documentation

Overview

Package badjwt is a deliberately flawed JWT implementation.

Do not copy this code. It is insecure.

Index

• Constants
• func Sign(p Payload, key []byte) (string, error)
• type Payload
  • func Verify(token string, key []byte) (Payload, error)

Constants

const Header = `{"alg": "HS256", "typ": "JWT"}`

Header identifies the algorithm used to generate the signature.

Functions

func Sign

func Sign(p Payload, key []byte) (string, error)

Sign signs a payload with the given HS256 key.

Types

type Payload

type Payload map[string]any

A Payload is a set of claims.

func Verify

func Verify(token string, key []byte) (Payload, error)

Verify verifies a token using the given HS256 key.