PSJsonWebToken VS jose

So it depends on if your endpoint accepts JWTs. Generally I obtain a JWT from a seperate endpoint by passing a client ID and secret via IRM. The other way for endpoints that I "own" is that I generate one myself via New-JsonWebToken in my PSJsonWebToken module. Examples in readme here under "Token decoding, creation, and validation": https://github.com/anthonyg-1/PSJsonWebToken

Hello again! I've written a PowerShell module, PSJsonWebToken, that contains functions to create, validate, and test JSON Web Tokens (JWT) as well as the creation of JSON Web Keys (JWK). This module has been useful to me in validating the security of endpoints that accept JWTs for authentication as well as generating JWKs for signature verification for JWTs in an OpenID Connect flow. There are also some advanced functions for base64 decoding and encoding, exporting .NET X509Certificate objects to formatted strings, etc. https://github.com/anthonyg-1/PSJsonWebToken

JWT - jose

For demo purpose, we'll use some popular libs e.g. jose.

This module provides a lot of useful functions and utilities, but we will focus only on a couple of them. You can read more about the module itself if you feel like it.

Honestly, not exactly sure what the correct order is. The standard for encrypted jwt is called JWE. Most programming languages will have some kind of library that will handle the small details like order of operations. Example: jose for js.

I used standard Web APIs such as fetch() and WebCrypto. The most common thing I had to do was JWT token generation/validation. I worked with the jose library (the only dependency in the project) because it is cross-platform and also works with the WebCrypto API.

Biggest sharp edge I've encountered is the very much WIP WebCrypto API support. In practical terms, this means things like signing/verifying JWTs is not very well supported: https://github.com/panva/jose/discussions/243

That said, the situation is improving rapidly, and I've been personally willing to bet that the support will be solid by the time I finish prototyping and need to start adding auth to my latest project.