#RabitLogic/mjwt — JWT library for MoonBit

Requires MoonBit v0.10.4+ (uses extend syntax for explicit trait method mounting; the old implicit method mounting behavior from v0.10.3 and earlier is deprecated in this version).

#Features

#Quick start

let claims = JwtClaims::new()
claims.set_subject("user123")

// --- HS256 convenience ---
let token = @mjwt.encode(claims, "my-secret")
let decoded = @mjwt.decode(token, "my-secret")
@mjwt.verify(token, "my-secret")  // true

// Inspect without verification (debugging/diagnostic use only)
let raw = @mjwt.decode_without_verify(token)
raw.claims.get_subject()  // Some("user123")

#Trait-based API (extensible)

///|
let signer = HmacSigner::new("HS256", "my-secret")

///|
let verifier = HmacVerifier::new("HS256", "my-secret")

///|
let token = @mjwt.encode_with(signer, claims)

///|
let decoded = @mjwt.decode_with(verifier, token)

#Expiration check

claims.set_expiration(1_800_000_000L)
claims.is_expired()     // false
claims.is_now_valid()   // true

#Supported algorithms

#HS256 / HS384 / HS512 (HMAC)

let s = HmacSigner::new("HS256", "my-secret")?
let v = HmacVerifier::new("HS256", "my-secret")?

#RS256 (RSA PKCS#1 v1.5)

let signer   = RsaSigner::new(n_bytes, d_bytes, "RS256")?
let verifier = RsaVerifier::new(n_bytes, e_bytes, "RS256")?
let token    = @mjwt.encode_with(signer, claims)?
let decoded  = @mjwt.decode_with(verifier, token)?

#ES256 (ECDSA P-256)

let signer   = EcSigner::new_p256(priv_bytes, pub_bytes)?
let verifier = EcVerifier::new_p256(pub_bytes)?
let token    = @mjwt.encode_with(signer, claims)?

#Standard claims API

#Architecture

                      ┌──────────────────────┐
                      │   JwtSigner trait     │
                      │   JwtVerifier trait   │
                      └──────────┬───────────┘
                                 │ implements
           ┌─────────────────────┼──────────────────────┐
           ▼                     ▼                      ▼
    HmacSigner              RsaSigner               EcSigner
    HmacVerifier            RsaVerifier             EcVerifier
    (HS256/384/512)         (RS256)                 (ES256 P-256)

#File structure

#Adding a custom signer

struct MySigner { key : Bytes }
impl JwtSigner for MySigner with fn alg_name(_) -> String { "HS256" }
impl JwtSigner for MySigner with fn sign(self, msg) -> .. { .. }

// Mount trait methods as dot-syntax methods on MySigner
pub  MySigner with JwtSigner::{alg_name, sign}

let token = @mjwt.encode_with(MySigner { key }, claims)

#Development

moon test              # run 32 tests
moon bench             # run 4 benchmarks
moon check             # check for warnings
moon fmt               # format code
moon info              # update interface (.mbti) files

#Cross-validation

# Full interop test (Python + MoonBit)
python3 examples/exact_validate.py

# Legacy format check
python3 examples/py_compare.py

#Performance

ES256 was optimized in v0.2.0 with Jacobian projective coordinates, eliminating 384 modular inversions from the inner loop. Run benchmarks: moon bench

#License