jsonwebkey-thumbprint

jsonwebkey-thumbprint

Variable-Length Integer Encoding defined by RFC 7638.

Tables of Content

• Features
• Usage
• Security Considerations
• License

Features

• JWK Thumbprint pre-compute
• JWK Thumbprint when passing a hash and encoding function
• TypeScript types

Usage

import { jwkThumbprint } from "jsonwebkey-thumbprint";

// A public key exported as a JWK
const keypair = await crypto.subtle.generateKey("Ed25519", true, [
  "sign",
  "verify",
]);
const jwk = await crypto.subtle.exportKey("jwk", keypair.publicKey);

// Using sha-256 as a hash function and base64url as encoding
const hash = (b: BufferSource) => crypto.subtle.digest("SHA-256", b);
const decode = (u: ArrayBuffer) =>
  b64ToB64URL(b64ToB64NoPadding(u8ToB64(new Uint8Array(u))));

// Compute the JWK Thumbprint for the public key
console.log(await jwkThumbprint(jwk, hash, decode));

// Helper functions
const u8ToB64 = (u: Uint8Array) => btoa(String.fromCharCode(...u));

const b64ToB64URL = (s: string) => s.replace(/\+/g, "-").replace(/\//g, "_");

const b64ToB64NoPadding = (s: string) => s.replace(/=/g, "");

Security Considerations

This software has not been audited. Please use at your sole discretion.

License

This project is under the Apache-2.0 license.

Contribution

Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you shall be Apache-2.0 licensed as above, without any additional terms or conditions.