Does Godot have a default JWT signature scheme?

BareBunny · December 14, 2023, 1:31am

Godot Version

Godot 4.2

Question

alex2782 · December 14, 2023, 2:19am

I don’t think so, otherwise nobody would create libs for it:

github.com/godotengine/godot-proposals

Add JWT (JSON Web Token) support

opened 06:58AM - 27 Jun 20 UTC

closed 05:50PM - 23 Jul 21 UTC

InsightGit

topic:core archived topic:network

**Describe the project you are working on:** A creative multiplayer shooter w…ith separate custom back-end apis written in Python and the game server + client written in GDScript. **Describe the problem or limitation you are having in your project:** When I communicate between my game server and my backend servers, I'm using JWT now, albeit in a sort of hacky way partially in GDScript and partially in Python (see If this enhancement will not be used often...) that assumes that python is installed on the machine with the requisite JWT library (and thus is only feasible to implement on systems I control like my server). **Describe the feature / enhancement and how it helps to overcome the problem or limitation:** It would get rid of the need to call an external python script server-side and handle JWT claims purely in GDScript, and allow me to parse/create JWT tokens client side. **Describe how your proposal will work, with code, pseudocode, mockups, and/or diagrams:** If I were to implement this, I'd most likely write a wrapper around an existing C or C++ JWT API like [libjwt](https://github.com/benmcollins/libjwt) or something if possible(I haven't worked in the Godot codebase enough to register whether it is). I would probably have one class similar to how the existing JSON class works where there would be two static functions. One of which would decode (with verification being done by default) a JWT token given the token, the JWT algorithm being used (ie RS256 or HS256) and the secret/public key, and the other of which would create such a token with similar parameters (except it would take a Dictionary and spew out a JWT token in the form of a String). **If this enhancement will not be used often, can it be worked around with a few lines of script?:** Yes, but not natively in GDScript. For example, what I am doing right now is executing a separate python script on the server using OS.execute funnelling in the JSON data through command-line arguments and then extracting the JWT string via the command line. It works, but is a bit cumbersome and only works on systems that have Python and the requisite JWT library installed. **Is there a reason why this should be core and not an add-on in the asset library?:** It would pair well with JSON and serve as an easy way built into the engine to quickly exchange information that's verified to come from a trusted source, and thus could even possibly be used for passing serialized Variant objects over the network in a trusted and secure way.

BareBunny · December 14, 2023, 2:28am

Thank you very much. Can you make friends?

alex2782 · December 14, 2023, 2:36am

Can you make friends?

what du you mean? not sure if the forum has such a function, if I understand it correctly

BareBunny · December 14, 2023, 2:43am

[quote=“alex2782, post:4, topic:37344, full:true”]

Can you make friends?

Haha, there’s a problem with the translation software I’m using, “I want to make friends with you.”

BareBunny · December 14, 2023, 2:45am

Where are you from? What chat software do you usually use? Do you use “WeChat or Tiktok”?

alex2782 · December 14, 2023, 2:59am

Germany, I rarely use chats, I often mute them.

Except for my family members, for emergencies. You can write me a personal message via forum, I read almost every day when I find time.

BareBunny · December 14, 2023, 3:15am

Okay, nice to meet you