mirror of
https://github.com/gchq/CyberChef.git
synced 2025-04-26 01:36:17 -04:00
71c8c8aac0
Expose the 'header' option of the jsonwebtoken module [1] as an ingredient. This allows for adding and overwriting JWT header fields such as 'type' or 'kid'. [1]: https://github.com/auth0/node-jsonwebtoken?tab=readme-ov-file#usage
70 lines
1.9 KiB
JavaScript
70 lines
1.9 KiB
JavaScript
/**
|
|
* @author gchq77703 []
|
|
* @copyright Crown Copyright 2018
|
|
* @license Apache-2.0
|
|
*/
|
|
import Operation from "../Operation.mjs";
|
|
import jwt from "jsonwebtoken";
|
|
import OperationError from "../errors/OperationError.mjs";
|
|
import {JWT_ALGORITHMS} from "../lib/JWT.mjs";
|
|
|
|
|
|
/**
|
|
* JWT Sign operation
|
|
*/
|
|
class JWTSign extends Operation {
|
|
|
|
/**
|
|
* JWTSign constructor
|
|
*/
|
|
constructor() {
|
|
super();
|
|
|
|
this.name = "JWT Sign";
|
|
this.module = "Crypto";
|
|
this.description = "Signs a JSON object as a JSON Web Token using a provided secret / private key.<br><br>The key should be either the secret for HMAC algorithms or the PEM-encoded private key for RSA and ECDSA.";
|
|
this.infoURL = "https://wikipedia.org/wiki/JSON_Web_Token";
|
|
this.inputType = "JSON";
|
|
this.outputType = "string";
|
|
this.args = [
|
|
{
|
|
name: "Private/Secret Key",
|
|
type: "text",
|
|
value: "secret"
|
|
},
|
|
{
|
|
name: "Signing algorithm",
|
|
type: "option",
|
|
value: JWT_ALGORITHMS
|
|
},
|
|
{
|
|
name: "Header",
|
|
type: "text",
|
|
value: "{}"
|
|
}
|
|
];
|
|
}
|
|
|
|
/**
|
|
* @param {JSON} input
|
|
* @param {Object[]} args
|
|
* @returns {string}
|
|
*/
|
|
run(input, args) {
|
|
const [key, algorithm, header] = args;
|
|
|
|
try {
|
|
return jwt.sign(input, key, {
|
|
algorithm: algorithm === "None" ? "none" : algorithm,
|
|
header: JSON.parse(header || "{}")
|
|
});
|
|
} catch (err) {
|
|
throw new OperationError(`Error: Have you entered the key correctly? The key should be either the secret for HMAC algorithms or the PEM-encoded private key for RSA and ECDSA.
|
|
|
|
${err}`);
|
|
}
|
|
}
|
|
|
|
}
|
|
|
|
export default JWTSign;
|