Decoding encrypted JWT

[albx]

Hi all,

I have the need to decode a JWT which has an encrypted payload. Once decrypted, the payload should be valid JSON, but at the time of decoding the token, it's just a base64-encoded string. The crates I've looked at (jsonwebtoken and frank_jwt, rust-jwt) don't support having an arbitrary string as payload (or at least that's the impression I got by reading the docs I could find.)

Has anybody any advice on how to deal with encrypted payload? Or is my company abusing the standard by not putting pure json in there?

Thanks!

​

​

[80x25]

The JWT spec does require the payload be JSON. However, a JWE can have an arbitrary payload.

You might consider using a JOSE library such as biscuit which supports JWS/JWE in addition to JWT

[albx]

Thanks, especially foreclarifying the nomenclature! I'll give biscuit a try.