1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
|
package jws
import (
"encoding/base64"
"encoding/json"
"fmt"
"os"
"strings"
"github.com/pkg/errors"
"github.com/smallstep/cli/errs"
"github.com/smallstep/cli/jose"
"github.com/smallstep/cli/utils"
"github.com/urfave/cli"
)
func inspectCommand() cli.Command {
return cli.Command{
Name: "inspect",
Action: cli.ActionFunc(inspectAction),
Usage: `return the decoded JWS without verification`,
UsageText: `**step crypto jws inspect**
**--insecure** [**--json**]`,
Description: `**step crypto jws inspect** reads a JWS data structure from STDIN, decodes it,
and outputs the payload on STDERR. Since this command does not verify the JWS
you must pass **--insecure** as a misuse prevention mechanism.
For examples, see **step help crypto jws**.`,
Flags: []cli.Flag{
cli.BoolFlag{
Name: "json",
Usage: `Displays the header, payload and signature as a JSON object. The payload will
be encoded using Base64.`,
},
cli.BoolFlag{
Name: "insecure",
Hidden: true,
},
},
}
}
func inspectAction(ctx *cli.Context) error {
if err := errs.NumberOfArguments(ctx, 0); err != nil {
return err
}
if !ctx.Bool("insecure") {
return errs.InsecureCommand(ctx)
}
token, err := utils.ReadString(os.Stdin)
if err != nil {
return err
}
tok, err := jose.ParseJWS(token)
if err != nil {
return errors.Wrap(jose.TrimPrefix(err), "error parsing token")
}
if ctx.Bool("json") {
return printToken(tok)
}
os.Stdout.Write(tok.UnsafePayloadWithoutVerification())
return nil
}
func printToken(tok *jose.JSONWebSignature) error {
token, err := tok.CompactSerialize()
if err != nil {
return errors.Wrap(jose.TrimPrefix(err), "error serializing token")
}
parts := strings.Split(token, ".")
if len(parts) != 3 {
return errors.New("error decoding token: JWS must have three parts")
}
header, err := base64.RawURLEncoding.DecodeString(parts[0])
if err != nil {
return errors.Wrapf(err, "error decoding token")
}
m := make(map[string]json.RawMessage)
m["header"] = header
m["payload"] = []byte(`"` + parts[1] + `"`)
m["signature"] = []byte(`"` + parts[2] + `"`)
b, err := json.MarshalIndent(m, "", " ")
if err != nil {
return errors.Wrapf(err, "error marshaling token data")
}
fmt.Println(string(b))
return nil
}
|
