Implement JWT tokens for external site links

Signed-off-by: Joas Schilling <coding@schilljs.com>

1 files changed, 69 insertions, 0 deletions

diff --git a/docs/jwt-sample.php b/docs/jwt-sample.php
new file mode 100644
index 0000000..e93bf85
--- /dev/null
+++ b/docs/jwt-sample.php
@@ -0,0 +1,69 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * @copyright Copyright (c) 2022 Joas Schilling <coding@schilljs.com>
+ *
+ * @license GNU AGPL version 3 or any later version
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ *
+ */
+
+include_once __DIR__ . '/vendor/autoload.php';
+
+/**
+ * Sample script for reading and verifying the JWT parameter of external sites
+ *
+ * 1. Install JWT
+ *
+ *        composer require firebase/php-jwt
+ *
+ * 2. Define this page as external site with the parameter `?jwt={jwt}`
+ * 3. Replace the key below with the result of the following command:
+ *
+ *        occ config:app:get external jwt_token_pubkey_es256
+ *
+ * 4. The $decoded variable contains the JWT token details
+ *
+ *        object(stdClass)[4]
+ *        public 'iss' => string 'https://nextcloud25.local/' (length=26)
+ *        public 'iat' => int 1663331793
+ *        public 'exp' => int 1663335393
+ *        public 'userdata' =>
+ *          object(stdClass)[5]
+ *            public 'email' => string 'admin@schilljs.com' (length=18)
+ *            public 'uid' => string 'admin' (length=5)
+ *            public 'displayName' => string 'Laura Adams' (length=11)
+ *
+ */
+
+$key = '-----BEGIN PUBLIC KEY-----
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEys95/Y0nsJZ/OIz59H1eOTHmzkBs
+d2yHITf+BPqxirqskhFpnF7OrXPG/i3HB2mC1JoBjvpGdWov0pkzst5CuQ==
+-----END PUBLIC KEY-----
+';
+
+$jwt = rawurldecode($_REQUEST['jwt']);
+
+try {
+	$keyO = new \Firebase\JWT\Key($key, 'ES256');
+	$decoded = \Firebase\JWT\JWT::decode($jwt, $keyO);
+	var_dump($decoded);
+} catch (\Throwable $e) {
+	var_dump($e);
+	exit;
+}
+