jwcrypto_jws_token_generation_signing_and_verification.py

1from jwcrypto import jwk, jws
2from jwcrypto.common import json_encode, json_decode
3
4# Generate a key
5key = jwk.JWK.generate(kty='oct', size=256)
6
7# Create a JWS token
8payload = "My Registered Claims"
9jwstoken = jws.JWS(payload.encode('utf-8'))
10jwstoken.add_signature(key, None,
11                       json_encode({"alg": "HS256"}),
12                       json_encode({"kid": key.thumbprint()}))
13sig = jwstoken.serialize()
14
15# Verify the token
16jwstoken = jws.JWS()
17jwstoken.deserialize(sig)
18jwstoken.verify(key)
19payload = jwstoken.payload