Benjamim is José's younger brother

JWT library for token creation and verification

RFC7519 Internet Engineering Task Force (IETF) UPDATED May 2015 SOURCE https://tools.ietf.org/html/rfc7519

Abstract - JSON Web Token (JWT) is a compact, URL-safe means of representing claims to be transferred between two parties. The claims in a JWT are encoded as a JSON object that is used as the payload of a JSON Web Signature (JWS) structure or as the plaintext of a JSON Web Encryption (JWE) structure, enabling the claims to be digitally signed or integrity protected with a Message Authentication Code (MAC) and/or encrypted.

Resumo - JSON Web Token (JWT) é um meio compacto e seguro de URL de representar reivindicações a serem transferidas entre duas partes. As reivindicações em um JWT são codificados como um objeto JSON que é usado como a carga útil de um JSON Estrutura de assinatura da Web (JWS) ou como o texto simples de um JSON Web Estrutura de criptografia (JWE), permitindo que as declarações sejam digitalmente assinado ou integridade protegida com um código de autenticação de mensagem (MAC) e/ou criptografado.

Install

Boss install luisnt/Benjamim

Generate a new Token

Support Types

{
    jti - Jwt ID          - Jwt ID (ID)
    iss - Issuer          - Issuer (Issuer)
    sub - Subject         - Subject matter
    aud - Audience        - Audience (Remote IP)
    iat - Issued At       - Issued on (When Token was Issued / Automatic)
    nbf - Not Before      - Validity Started (Starts At)
    exp - Expiration Time - Expired Validity (Expires On)
    add - custom key      - can be: integer, decimal, datetime, boolean, JsonObject, JsonArray and Variant 
    
    jti - Jwt ID          - Jwt ID ( ID )
    iss - Issuer          - Emissor ( Emissor )
    sub - Subject         - Assunto
    aud - Audience        - Audiência ( Remote IP )
    iat - Issued At       - Emitido em ( Quando o Token foi Emitido / Automático )
    nbf - Not Before      - Validade Iniciada ( Inicia Em )
    exp - Expiration Time - Validade Terminada ( Expirar Em )
    add - custom key      - can be: integer, decimal, datetime, boolean, JsonObject, JsonArray e Variant  
}

Sample use

 
 uses
  System.SysUtils
    , Benjamim
    ;

procedure print(aToken: string; aSign: boolean);
begin
  WriteLn(EmptyStr);
  WriteLn('       Token: ');
  WriteLn(aToken);
  WriteLn('   Algorithm: ', Benjamim.JWT.Header.Algorithm);
  WriteLn('        Sign: ', BoolToStr(aSign, true));
  WriteLn(EmptyStr);
  WriteLn(EmptyStr);
end;

var
  LToken: string;
  LSign : boolean;

begin
  ReportMemoryLeaksOnShutdown := true;

  Benjamim.JWT.Password('secret'); { OPTIONAL }

  Benjamim.JWT.Header.Algorithm(TJwtAlgorithm.HS512); { OPTIONAL - DEFAULT TJwtAlgorithm.HS256 }

  Benjamim.JWT.Payload.jti(1)
    .iss('Luis Nt')
    .sub('Chave de acesso')
    .aud('192.168.0.77')
    .iat('2021-01-31 15:55:21.123')
    .nbf('2021-01-31 18:01:01.001')
    .exp('2021-01-31 22:01:01.001')
    .add('price', 10.5)
    .add('name', 'your fullname')
    .add('phone', 559822223333)
    ;
  LToken := Benjamim.JWT.Signature.Sign;

  LSign :=
    Benjamim.JWT
    .Token(LToken)
    .Signature
    .Verify;

  print(LToken, LSign);

  ReadLn;

end.

Verify a Token

Sample use

 
 uses
   Benjamim
    ;

  procedure print(aToken: string; aSign: boolean);
  begin
    WriteLn(EmptyStr);
    WriteLn('       Token: ');
    WriteLn(aToken);
    WriteLn('   Algorithm: ', Benjamim.JWT.Header.Algorithm);
    WriteLn('        Sign: ', BoolToStr(aSign, true));
    WriteLn(EmptyStr);
    WriteLn(EmptyStr);
  end;

  var
    LToken: string;
    LSign : boolean;
  begin
      ReportMemoryLeaksOnShutdown := true;

      LToken :=
        'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6Ikpva' +
        'G4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c';

      LSign :=
        Benjamim.JWT
        .Token(LToken)
        .Password('your-256-bit-secret') { usado no site JWT.io }
        .Signature
        .Verify;

      print(LToken, LSign);

      ReadLn;

  end.