ユーザーと認証

const jwt = require('jsonwebtoken');
 
const securityKey = JSON.parse(
'{"id":"43f7a6d6-f064-4a6b-8890-fff70b1363ca","key":"0wQGQwukZLkJNShlHS0Nm3SCiIwrWNfm7NEPOhukJhM="}'
);
 
const now = Math.floor(Date.now() / 1000);
 
const payload = {
  iat: now,
  iss: 'da73dfca-7e33-43de-9e97-ece90aaada22',
  jti: 'c0625f5a-676c-4dcc-883d-eea8f06f4ae5',
  ski: securityKey.id,
  stp: 'email',
  sub: 'john.doe@infobip.com',
  exp: now + 15,
  sid: '8b52e759-5955-49d9-bb44-bc1b1ca22745'
};
 
const token = jwt.sign(payload, Buffer.from(securityKey.key, 'base64'));
 
console.log(token);

import com.fasterxml.jackson.databind.ObjectMapper;
import com.nimbusds.jose.JWSAlgorithm;
import com.nimbusds.jose.JWSHeader;
import com.nimbusds.jose.crypto.MACSigner;
import com.nimbusds.jwt.JWTClaimsSet;
import com.nimbusds.jwt.SignedJWT;
import org.springframework.http.HttpStatus;
import org.springframework.http.ResponseEntity;
import org.springframework.stereotype.Component;
 
import java.time.Instant;
import java.util.Base64;
import java.util.Date;
import java.util.UUID;
 
@Component
class PersonalisationTokenGenerator {
    public ResponseEntity<String> generate(String widgetId, String securityKey) {
        try {
            ObjectMapper mapper = new ObjectMapper();
            SecurityKeyHMAC secret = mapper.readValue(securityKey, SecurityKeyHMAC.class);
 
            MACSigner signer = new MACSigner(Base64.getDecoder().decode(secret.getKey()));
 
            long now = Instant.now().getEpochSecond();
 
            JWTClaimsSet claimsSet = new JWTClaimsSet.Builder()
                    .issueTime(new Date(now * 1000))
                    .issuer(widgetId)
                    .jwtID("c0625f5a-676c-4dcc-883d-eea8f06f4ae5")
                    .claim("ski", secret.getId())
                    .claim("stp", "email")
                    .subject("john.doe@infobip.com")
                    .expirationTime(new Date((now + 15) * 1000))
                    .claim("sid", "8b52e759-5955-49d9-bb44-bc1b1ca22745")
                    .build();
 
            SignedJWT token = new SignedJWT(new JWSHeader(JWSAlgorithm.HS256), claimsSet);
            token.sign(signer);
 
            return ResponseEntity.ok(token.serialize());
        } catch (Exception ex) {
            return ResponseEntity.status(HttpStatus.INTERNAL_SERVER_ERROR).build();
        }
    }
}
 
class SecurityKeyHMAC {
    private String id;
    private String key;
 
    public String getId() { return id; }
    public void setId(String id) { this.id = id; }
    public String getKey() { return key; }
    public void setKey(String key) { this.key = key; }
}

import com.fasterxml.jackson.module.kotlin.jacksonObjectMapper
import com.nimbusds.jose.JWSAlgorithm
import com.nimbusds.jose.JWSHeader
import com.nimbusds.jose.crypto.MACSigner
import com.nimbusds.jwt.JWTClaimsSet
import com.nimbusds.jwt.SignedJWT
import org.springframework.http.HttpStatus
import org.springframework.http.ResponseEntity
import org.springframework.stereotype.Component
import java.time.Instant
import java.util.*
 
@Component
class PersonalisationTokenGenerator {
    fun authorize(widgetId: String, securityKey: String): ResponseEntity<String> {
        return try {
            val mapper = jacksonObjectMapper()
            val secret = mapper.readValue(securityKey, SecurityKeyHMAC::class.java)
 
            val signer = MACSigner(Base64.getDecoder().decode(secret.key))
            val now = Instant.now().epochSecond
 
            val claimsSet = JWTClaimsSet.Builder()
                .issueTime(Date(now * 1000))
                .issuer(widgetId)
                .jwtID("c0625f5a-676c-4dcc-883d-eea8f06f4ae5")
                .claim("ski", secret.id)
                .claim("stp", "email")
                .subject("john.doe@infobip.com")
                .expirationTime(Date((now + 15) * 1000))
                .claim("sid", "8b52e759-5955-49d9-bb44-bc1b1ca22745")
                .build()
 
            val token = SignedJWT(JWSHeader(JWSAlgorithm.HS256), claimsSet)
            token.sign(signer)
 
            ResponseEntity.ok(token.serialize())
        } catch (ex: Exception) {
            ResponseEntity.status(HttpStatus.INTERNAL_SERVER_ERROR).build()
        }
    }
}
 
data class SecurityKeyHMAC(val id: String, val key: String)

import SwiftJWT
 
struct JWTClaims: Claims {
    let iat: Date
    let iss: String
    let jti: String
    let ski: String
    let stp: String
    let sub: String
    let exp: Date
    let sid: String
}
 
let now = Date()
let claims = JWTClaims(
    iat: now,
    iss: "da73dfca-7e33-43de-9e97-ece90aaada22",
    jti: "c0625f5a-676c-4dcc-883d-eea8f06f4ae5",
    ski: "43f7a6d6-f064-4a6b-8890-fff70b1363ca",
    stp: "email",
    sub: "john.doe@infobip.com",
    exp: now.addingTimeInterval(15),
    sid: "8b52e759-5955-49d9-bb44-bc1b1ca22745"
)
 
let jwt = JWT(header: Header(), claims: claims)
let secret = Data(base64Encoded: "0wQGQwukZLkJNShlHS0Nm3SCiIwrWNfm7NEPOhukJhM=")!
 
let signer = JWTSigner.hs256(key: secret)
let signedJWT = try? jwt.sign(using: signer)

use \Firebase\JWT\JWT;
 
$timestamp = time();
$securityKey = json_decode('{"id":"43f7a6d6-f064-4a6b-8890-fff70b1363ca","key":"0wQGQwukZLkJNShlHS0Nm3SCiIwrWNfm7NEPOhukJhM="}');
 
$payload = [
    'iat' => $timestamp,
    'iss' => 'da73dfca-7e33-43de-9e97-ece90aaada22',
    'jti' => 'c0625f5a-676c-4dcc-883d-eea8f06f4ae5',
    'ski' => $securityKey->id,
    'stp' => 'email',
    'sub' => 'john.doe@infobip.com',
    'exp' => $timestamp + 15,
    'sid' => '8b52e759-5955-49d9-bb44-bc1b1ca22745'
];
 
$token = JWT::encode($payload, base64_decode($securityKey->key), 'HS256');