mTLS-bound JWT token service for Swarmauri
Project description
Swarmauri Tokens TLS-Bound JWT
A mutual-TLS bound JWT token service per RFC 8705.
It derives the x5t#S256 confirmation claim from the current client certificate
and verifies that presented certificates match the token binding.
Features:
- Automatic
cnfclaim insertion with the SHA-256 thumbprint of the client certificate - Verification that rejects tokens when the live certificate is missing or mismatched
Installation
pip install swarmauri_tokens_tlsboundjwt
Usage
from swarmauri_core.crypto.types import JWAAlg
from swarmauri_tokens_tlsboundjwt import TlsBoundJWTTokenService
svc = TlsBoundJWTTokenService(key_provider, client_cert_der_getter=my_cert_getter)
await svc.mint({"sub": "alice"}, alg=JWAAlg.HS256)
Entry Point
The service registers under the swarmauri.tokens entry point as
TlsBoundJWTTokenService.
Want to help?
If you want to contribute to swarmauri-sdk, read up on our guidelines for contributing that will help you get started.
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file swarmauri_tokens_tlsboundjwt-0.2.0.dev32.tar.gz.
File metadata
- Download URL: swarmauri_tokens_tlsboundjwt-0.2.0.dev32.tar.gz
- Upload date:
- Size: 7.4 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: uv/0.10.3 {"installer":{"name":"uv","version":"0.10.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
00b83b757da1464e34cc6f6b1a5b2190c1b55e22a51dba094bc9072993697a67
|
|
| MD5 |
f1c5d555b823c949cf1f013d733aa121
|
|
| BLAKE2b-256 |
107401cd3c306aadcc78f3162dcafa3cd9ed0be6f2a0173f9ef085b942e140c2
|
File details
Details for the file swarmauri_tokens_tlsboundjwt-0.2.0.dev32-py3-none-any.whl.
File metadata
- Download URL: swarmauri_tokens_tlsboundjwt-0.2.0.dev32-py3-none-any.whl
- Upload date:
- Size: 8.6 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: uv/0.10.3 {"installer":{"name":"uv","version":"0.10.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
3ded917ae9955530585e2b6167a539e73eefb1ede9a6051fa270ee74a1144275
|
|
| MD5 |
a3402089881b5e72d4718c7e0aa27c3d
|
|
| BLAKE2b-256 |
c8bd6a67973af25289892d79a885d87ca4d9b90059215df1589d668501c23bb1
|
