REST API's, JSON Web Tokens & Hash Algorithms

[Tom Glod]

Hey Timothy....While I'm no expert on this subject or the schemes used by
box.com I would put money on the idea that livecode has what you need to
make this work.  You can generate RSA keys... you can hash anything you
need..... and you can encrypt and decrypt using RSA private or public
keys......

https://livecode.fandom.com/wiki/Encrypt_using_rsa

What could the box api ask of you that you cannot give it?

Often times for me knowing i have the tools I need to figure it out gets me
over the hump.

message me at tom at makeshyft dot com if you can't figure it out and u
want me to look at the docs for box.com and your code.

Cheers

Tom

On Tue, Nov 12, 2019 at 12:48 PM Bleiler, Timothy via use-livecode <
use-livecode at lists.runrev.com> wrote:

> Thank you Tom!
>
> This is all new to me and I’d missed that distinction. I hope you don’t
> mind a follow up question.
>
> Is it your understanding that using SHA-256 or SHA3-256 as the
> “digestType” in the Livecode function would meet the service requirement
> for RS-256 or is there something else I’m missing?
>
> Tim
>
>
> On Nov 12, 2019, at 11:27 AM, Tom Glod via use-livecode <
> use-livecode at lists.runrev.com<mailto:use-livecode at lists.runrev.com>>
> wrote:
>
> Hey Tim, the ciphernames lists "encryption" algorithms not hashing.
>
> I believe RS256 refers to RSA with SHA 256.
>
> messagedigest is the function you want to look up for hashing algorithms.
>
> On Tue, Nov 12, 2019 at 9:24 AM Bleiler, Timothy via use-livecode <
> use-livecode at lists.runrev.com<mailto:use-livecode at lists.runrev.com>>
> wrote:
>
> Hi,
>
> I’ve seen some great presentations in the last few years from the
> conferences and Livecode Global sessions using Livecode to access REST
> API’s from web services, so I’m hoping someone can help me out here.
>
> I need to access a web service (Box.com<http://box.com/><http://Box.com<
> http://box.com/>>) from my Livecode
> app using JSON web tokens.
> The service  documentation states that they only support RS256, RS384, and
> RS512 for hashing the signature in the token. Unfortunately, in the 139
> options and variations listed by the Livecode CipherNames function I don’t
> see these.
>
> Have I missed or misunderstood something or am I out of luck for using
> Livecode for this task?
>
> Thanks,
>
> Tim Bleiler, Ph.D.
> Instructional Designer, HSIT
> University at Buffalo
>
> _______________________________________________
> use-livecode mailing list
> use-livecode at lists.runrev.com<mailto:use-livecode at lists.runrev.com>
> Please visit this url to subscribe, unsubscribe and manage your
> subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode
>
>
>
> --
> Tom Glod
> Founder & Developer
> MakeShyft R.D.A (www.makeshyft.com<http://www.makeshyft.com/>)
> Office:226-706-9339
> Mobile:226-706-9793
> _______________________________________________
> use-livecode mailing list
> use-livecode at lists.runrev.com<mailto:use-livecode at lists.runrev.com>
> Please visit this url to subscribe, unsubscribe and manage your
> subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode
>
> _______________________________________________
> use-livecode mailing list
> use-livecode at lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your
> subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode
>


-- 
Tom Glod
Founder & Developer
MakeShyft R.D.A (www.makeshyft.com)
Office:226-706-9339
Mobile:226-706-9793