jwt_generate
Create JSON Web Tokens by specifying header, payload, algorithm, and cryptographic key for testing and security validation.
Instructions
Generate a JWT with the given header, payload, algorithm, and key (HS* or RS*).
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| header | Yes | ||
| payload | Yes | ||
| alg | Yes | ||
| key | Yes |
Implementation Reference
- server.py:131-165 (handler)The jwt_generate tool handler, decorated with @server.tool() for registration. Generates JWT tokens supporting HS256/HS384/HS512 and RS256/RS384/RS512 algorithms using provided header, payload, alg, and key. Handles base64 encoding, signing with HMAC or RSA private key.
@server.tool() def jwt_generate(header: dict, payload: dict, alg: str, key: str) -> dict: """Generate a JWT with the given header, payload, algorithm, and key (HS* or RS*).""" import base64 import json import hmac import hashlib try: def b64encode(data): return base64.urlsafe_b64encode(data).rstrip(b'=').decode() header_b64 = b64encode(json.dumps(header, separators=(",", ":")).encode()) payload_b64 = b64encode(json.dumps(payload, separators=(",", ":")).encode()) signing_input = f"{header_b64}.{payload_b64}".encode() alg_upper = alg.upper() if alg_upper in ["HS256", "HS384", "HS512"]: hash_alg = {"HS256": hashlib.sha256, "HS384": hashlib.sha384, "HS512": hashlib.sha512}[alg_upper] sig = hmac.new(key.encode(), signing_input, hash_alg).digest() signature_b64 = b64encode(sig) elif alg_upper in ["RS256", "RS384", "RS512"]: from cryptography.hazmat.primitives import serialization, hashes from cryptography.hazmat.primitives.asymmetric import padding private_key = serialization.load_pem_private_key(key.encode(), password=None) hash_alg = {"RS256": hashes.SHA256(), "RS384": hashes.SHA384(), "RS512": hashes.SHA512()}[alg_upper] sig = private_key.sign( signing_input, padding.PKCS1v15(), hash_alg ) signature_b64 = b64encode(sig) else: return {"error": f"Unsupported algorithm: {alg}"} jwt = f"{header_b64}.{payload_b64}.{signature_b64}" return {"jwt": jwt} except Exception as e: return {"error": str(e)}