Decode JWT TCL

• Dec 3, 2022

• #2

xwb

Programmer

Jul 11, 2002

6,828

GB

There are several variants - with/without signaturea, with/without encryption. Does what you want to decode have encryption or signatures? If it is just a plain JWT, it could be possible but with signatures and/or encryption, it is quite unlikely that you can do anything with it unless you know the encryption keys and where the keys/signature lies in the token.

 

Upvote 0 Downvote

• Dec 3, 2022

• Thread starter
• #3

DuuTz

Programmer

Dec 1, 2022

3

BR

Hey. Thanks for replying, they are. Simple jwts, no encryption or signature.

 

Upvote 0 Downvote

• Dec 3, 2022

• #4

mikrom

Programmer

Mar 27, 2002

3,020

SK

I searched for JWT and found modules for Perl, Python, Ruby.
But for Tcl i found only this library:

https://www.chilkatsoft.com/refdoc/tclJwtRef.html

I tried it, but could not figure out, how to decode your example with it.

In contrast, with Python I was done quickly:

Code:

>>> import jwt

>>> jwt_options = {
        'verify_signature': False,
        'verify_exp': False,
        'verify_nbf': False,
        'verify_iat': False,
        'verify_aud': False
    }
>>> encoded_jwt = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"

>>> jwt.decode(encoded_jwt, key="", algorithms=['HS256', ], options=wt_options)
{'sub': '1234567890', 'name': 'John Doe', 'iat': 1516239022}
>>>

 

Upvote 0 Downvote

• Dec 3, 2022

• Thread starter
• #5

DuuTz

Programmer

Dec 1, 2022

3

BR

Yeah, the challenge is to do it in tcl. I need to use this in a framework that only accepts tcl.

 

Upvote 0 Downvote

• Dec 3, 2022

• #6

mikrom

Programmer

Mar 27, 2002

3,020

SK

If you don't want to program the JWT decode algorithm yourself, then IMO you have these choices:
1) use the chilkat library (link given above), but it seems that it's not free and you have to buy it.
2) use any other external program (written in any other language) which should be called from Tcl and does the work. Then the result could be used inside of your Tcl code.
Personally, I would prefer the option 2

 

Upvote 0 Downvote

• Dec 3, 2022

• #7

mikrom

Programmer

Mar 27, 2002

3,020

SK

Here are libraries in several programming languages available for JWT. Unfortunately Tcl is not in between.

https://jwt.io/libraries

 

Upvote 0 Downvote