EdDSA signature generation & validation in Nimbus JOSE + JWT

scottbrady91 · scottbrady91 · commit 9be416b83b4f · 2019-11-30T15:22:57.000Z
diff --git a/KotlinNimbusJoseJwt/build.gradle b/KotlinNimbusJoseJwt/build.gradle
@@ -15,6 +15,7 @@ repositories {
 dependencies {
     implementation "org.jetbrains.kotlin:kotlin-stdlib-jdk8"
     implementation "com.nimbusds:nimbus-jose-jwt:7.8.1"
+    implementation "com.google.crypto.tink:tink:1.2.2"
     testCompile group: 'junit', name: 'junit', version: '4.12'
 }
 
diff --git a/KotlinNimbusJoseJwt/src/main/kotlin/EdDSA.kt b/KotlinNimbusJoseJwt/src/main/kotlin/EdDSA.kt
@@ -0,0 +1,42 @@
+import com.nimbusds.jose.JOSEObjectType
+import com.nimbusds.jose.JWSAlgorithm
+import com.nimbusds.jose.JWSHeader
+import com.nimbusds.jose.crypto.Ed25519Signer
+import com.nimbusds.jose.crypto.Ed25519Verifier
+import com.nimbusds.jose.jwk.Curve
+import com.nimbusds.jose.jwk.OctetKeyPair
+import com.nimbusds.jose.jwk.gen.OctetKeyPairGenerator
+import com.nimbusds.jwt.JWTClaimsSet
+import com.nimbusds.jwt.SignedJWT
+import java.time.Instant
+import java.util.*
+
+fun main() {
+    val key: OctetKeyPair = OctetKeyPairGenerator(Curve.Ed25519)
+        .keyID("123")
+        .generate()
+
+    val header = JWSHeader.Builder(JWSAlgorithm.EdDSA)
+        .type(JOSEObjectType.JWT)
+        .keyID(key.keyID)
+        .build();
+    val payload = JWTClaimsSet.Builder()
+        .issuer("me")
+        .audience("you")
+        .subject("bob")
+        .expirationTime(Date.from(Instant.now().plusSeconds(120)))
+        .build()
+
+    val signedJWT = SignedJWT(header, payload)
+    signedJWT.sign(Ed25519Signer(key))
+
+    val jwt: String = signedJWT.serialize()
+    println(jwt)
+
+
+    // validate signature (and only signature)
+    val isValid: Boolean = SignedJWT
+        .parse(jwt)
+        .verify(Ed25519Verifier(key.toPublicJWK()))
+    println("Valid signature: $isValid")
+}

Original file line number	Diff line number	Diff line change
`@@ -15,6 +15,7 @@ repositories {`
`15`	`15`	`dependencies {`
`16`	`16`	`implementation "org.jetbrains.kotlin:kotlin-stdlib-jdk8"`
`17`	`17`	`implementation "com.nimbusds:nimbus-jose-jwt:7.8.1"`
	`18`	`+ implementation "com.google.crypto.tink:tink:1.2.2"`
`18`	`19`	`testCompile group: 'junit', name: 'junit', version: '4.12'`
`19`	`20`	`}`
`20`	`21`