module JWT::Signature

Signature logic for JWT

Constants

ALGOS
ToSign
ToVerify

Public Instance Methods

sign(algorithm, msg, key) click to toggle source
# File lib/jwt/signature.rb, line 32
def sign(algorithm, msg, key)
  algo = ALGOS.find do |alg|
    alg.const_get(:SUPPORTED).include? algorithm
  end
  algo.sign ToSign.new(algorithm, msg, key)
end
verify(algorithm, key, signing_input, signature) click to toggle source
# File lib/jwt/signature.rb, line 39
def verify(algorithm, key, signing_input, signature)
  algo = ALGOS.find do |alg|
    alg.const_get(:SUPPORTED).include? algorithm
  end
  verified = algo.verify(ToVerify.new(algorithm, key, signing_input, signature))
  raise(JWT::VerificationError, 'Signature verification raised') unless verified
rescue OpenSSL::PKey::PKeyError
  raise JWT::VerificationError, 'Signature verification raised'
ensure
  OpenSSL.errors.clear
end