JSON Web Token encoder and decoder.
Examples below assume the following imports
import Json.Decode
import Json.Encode
import TestHelpers
exposing
( aValidToken
, correctSecret
, encodePayload
, payload
, payloadDecoder
, wrongSecret
)Create and sign a token.
encode hmacSha256 encodePayload correctSecret payload
--> aValidToken
encode hmacSha512 Json.Encode.string "other secret" "some payload"
|> (decode Json.Decode.string "other secret")
--> Ok "some payload"
encode hmacSha224 Json.Encode.int "123" 456
|> (decode Json.Decode.int "abc")
--> Err <| InvalidSecret 456HMAC SHA224 digest algorithm.
HMAC SHA256 digest algorithm.
HMAC SHA384 digest algorithm.
HMAC SHA512 digest algorithm.
Types of errors which can occur during decoding of a token.
Type of algoirthm to use for the digest
String used to sign or verify a token.
A JSON web token.
Algorithm decoder.
Verify a token given a secret or public key.
If all goes well, you'll get a result back with the payload.
If something goes wrong, you get an error:
Some errors will include the payload. However, whenever there is an error the payload should not be trusted.