swarmauri_tokens_sshsig

An SSH signature token service for the Swarmauri framework. This service implements minting and verifying tokens signed with SSH-compatible algorithms such as Ed25519 and ECDSA P-256.

Features

• Mint and verify compact SSHSIG tokens
• Supports ssh-ed25519 and ecdsa-sha2-nistp256
• Integrates with the Swarmauri token management framework

Installation

pip install swarmauri_tokens_sshsig

Usage

from swarmauri_tokens_sshsig import SshSigTokenService
from swarmauri_core.key_providers import IKeyProvider

key_provider: IKeyProvider = ...  # Provide an implementation of IKeyProvider
svc = SshSigTokenService(key_provider, default_issuer="example.com")

token = await svc.mint({"sub": "alice"}, alg="ssh-ed25519", kid="ed1")
claims = await svc.verify(token, issuer="example.com")

The token format uses a compact three-part structure similar to JWT but relies on SSH signature algorithms. The payload is encoded as deterministic JSON and bound to a namespace before signing, providing interoperability with existing SSH key infrastructures.

Want to help?

If you want to contribute to swarmauri-sdk, read up on our guidelines for contributing that will help you get started.