JOSE
PHP JOSE (Javascript Object Signing and Encryption) Implementation
Requirements
phpseclib is required. http://phpseclib.sourceforge.net
Example
JWT
Encoding
$jwt = new JOSE_JWT(array(
'foo' => 'bar'
));
$jwt->toString();Decoding
$jwt_string = 'eyJ...';
$jwt = JOSE_JWT::decode($jwt_string);JWS
Signing
$private_key = "-----BEGIN RSA PRIVATE KEY-----\n....";
$jwt = new JOSE_JWT(array(
'foo' => 'bar'
));
$jws = $jwt->sign($private_key, 'RS256');NOTE: $private_key can be phpseclib\Crypt\RSA instance.
Verification
$public_key = "-----BEGIN RSA PUBLIC KEY-----\n....";
$jwt_string = 'eyJ...';
$jws = JOSE_JWT::decode($jwt_string);
$jws->verify($public_key, 'RS256');NOTE: $public_key can be JOSE_JWK or phpseclib\Crypt\RSA instance.
JWE
Encryption
$jwe = new JOSE_JWE($plain_text);
$jwe->encrypt(file_get_contents('/path/to/public_key.pem'));
$jwe->toString();Decryption
$jwt_string = 'eyJ...';
$jwe = JOSE_JWT::decode($jwt_string);
$jwe->decrypt($private_key);JWK
Encode
RSA Public Key
$public_key = new phpseclib\Crypt\RSA();
$public_key->loadKey('-----BEGIN RSA PUBLIC KEY-----\n...');
JOSE_JWK::encode($public_key); # => JOSE_JWK instanceRSA Private Key
$private_key = new phpseclib\Crypt\RSA();
$private_key->setPassword($pass_phrase); # skip if not encrypted
$private_key->loadKey('-----BEGIN RSA PRIVATE KEY-----\n...');
JOSE_JWK::encode($private_key); # => JOSE_JWK instanceDecode
RSA Public Key
# public key
$components = array(
'kty' => 'RSA',
'e' => 'AQAB',
'n' => 'x9vNhcvSrxjsegZAAo4OEuo...'
);
JOSE_JWK::decode($components); # => phpseclib\Crypt\RSA instanceRSA Private Key
Not supported.
Run Test
git clone git://github.com/nov/jose-php.git
cd jose
php composer.phar install --dev
./vendor/bin/phpunit -c test/phpunit.xml --tapCopyright
Copyright © 2013 Nov Matake & GREE Inc. See LICENSE for details.

Formed in 2009, the Archive Team (not to be confused with the archive.org Archive-It Team) is a rogue archivist collective dedicated to saving copies of rapidly dying or deleted websites for the sake of history and digital heritage. The group is 100% composed of volunteers and interested parties, and has expanded into a large amount of related projects for saving online and digital history.

