Contents

# frozen_string_literal: true

module JWT
  module Algos
    module HmacRbNaClFixed
      module_function

      MAPPING = {
        'HS256' => ::RbNaCl::HMAC::SHA256,
        'HS512256' => ::RbNaCl::HMAC::SHA512256,
        'HS384' => nil,
        'HS512' => ::RbNaCl::HMAC::SHA512
      }.freeze

      SUPPORTED = MAPPING.keys

      def sign(algorithm, msg, key)
        key ||= ''

        raise JWT::DecodeError, 'HMAC key expected to be a String' unless key.is_a?(String)

        if (hmac = resolve_algorithm(algorithm)) && key.bytesize <= hmac.key_bytes
          hmac.auth(padded_key_bytes(key, hmac.key_bytes), msg.encode('binary'))
        else
          Hmac.sign(algorithm, msg, key)
        end
      end

      def verify(algorithm, key, signing_input, signature)
        key ||= ''

        raise JWT::DecodeError, 'HMAC key expected to be a String' unless key.is_a?(String)

        if (hmac = resolve_algorithm(algorithm)) && key.bytesize <= hmac.key_bytes
          hmac.verify(padded_key_bytes(key, hmac.key_bytes), signature.encode('binary'), signing_input.encode('binary'))
        else
          Hmac.verify(algorithm, key, signing_input, signature)
        end
      rescue ::RbNaCl::BadAuthenticatorError
        false
      end

      def resolve_algorithm(algorithm)
        MAPPING.fetch(algorithm)
      end

      def padded_key_bytes(key, bytesize)
        key.bytes.fill(0, key.bytesize...bytesize).pack('C*')
      end
    end
  end
end

Version data entries

3 entries across 3 versions & 2 rubygems

Version	Path
fluent-plugin-google-cloud-logging-on-prem-0.1.0	vendor/ruby/3.1.0/gems/jwt-2.7.0/lib/jwt/algos/hmac_rbnacl_fixed.rb
jwt-2.7.0	lib/jwt/algos/hmac_rbnacl_fixed.rb
jwt-2.6.0	lib/jwt/algos/hmac_rbnacl_fixed.rb