PASETO for the Web Browser

This implements PASETO v4.local and v4.public in the browser, as well as PASERK k4.seal.

Why?

There are already other implementations of PASETO in JavaScript, but they're intended for Node.js.

This implementation runs in a web browser (using TweetNaCl for the elliptic curve operations).

Installing

NPM

1npm install paseto-browser

For Web Browsers

Download the dist files from the GitHub releases, then embed them via <script> tags.

Please refer to the examples directory for more information.

Usage

PASETO

v4.local

1<script src="paseto.v4.local.js" type="module"></script>
2<script type="module">
3(async function () {
4    // const encryptor = new PasetoV4Local(symmetric_key_uint8array)
5    const encryptor = PasetoV4Local.generate()
6    
7    // You can now encode/decode tokens using encryptor
8    const token = await encryptor.encode({'exp': "2039-01-01T13:37:00+00:00"})
9    const decoded = await encryptor.decode(token)
10    console.log(decoded.exp) // "2039-01-01T13:37:00+00:00"
11})();
12</script>

v4.public

1<script src="tweetnacl/nacl-fast.min.js" type="module"></script>
2<script src="paseto-browser/paseto.v4.public.js" type="module"></script>
3<script type="module">
4(async function () {
5    // const keypair = nacl.sign.keyPair()
6    // const sk = keypair.secretKey
7    // const pk = keypair.publicKey
8    // const signer = new PasetoV4Public(pk, sk)
9    const signer = PasetoV4Public.generate()
10    // You can now encode/decode tokens using signer
11
12    const token = await signer.encode({'exp': "2039-01-01T13:37:00+00:00"})
13    const decoded = await signer.decode(token)
14    console.log(decoded.exp) // "2039-01-01T13:37:00+00:00"
15})();
16</script>

PASERK

k4.seal

1<script src="tweetnacl/nacl-fast.min.js" type="module"></script>
2<script src="paseto-browser/paseto.v4.local.js" type="module"></script>
3<script src="paseto-browser/paserk.k4.seal.js" type="module"></script>
4<script type="module">
5(async function () {
6    const wrapper = PaserkK4Seal.generate()
7    /// Alternative 1
8    // const keypair = nacl.box.keyPair()
9    // const sk = keypair.secretKey
10    // const pk = keypair.publicKey
11    // const test = new PaserkK4Seal(pk, sk)
12
13    /// Alternative 2
14    // const keypair = nacl.sign.keyPair()
15    // const sk = keypair.secretKey
16    // const pk = keypair.publicKey
17    // const test = PaserkK4Seal.fromEdwardsKeys(pk, sk)
18
19    // One-side (only needs pk)
20    const p4l = PasetoV4Local.generate()
21    const wrapped = await wrapper.wrap(p4l)
22    const token = await p4l.encode({'exp': "2039-01-01T13:37:00+00:00"}, {'wpk': wrapped})
23    
24    // Other side (needs pk and sk), receives `token`
25    const footer = PasetoV4Local.getFooter(token)
26    const unwrapped = await test.unwrap(footer.wpk)
27    const decoded = await unwrapped.decode(token)
28    
29    console.log(decoded.exp) // "2039-01-01T13:37:00+00:00"
30})();
31</script>

Development / Contribution

To test your local changes, checkout this repository from Git then run the following commands:

1npm install
2npm run build

Note on dist

DO NOT commit any changes to dist; we will rebuild from source.

Any pull requests that touch dist will not be accepted.