frasertweedale / hs-jose

Haskell JOSE and JWT library
http://hackage.haskell.org/package/jose
Apache License 2.0
122 stars 46 forks source link

COSE support? #89

Open arianvp opened 4 years ago

arianvp commented 4 years ago

there is a "new" version of JOSE called COSE which is based on CBOR instead of JSON https://tools.ietf.org/html/rfc8152

it is used; for example, in the new https://www.w3.org/TR/webauthn/ browser API to talk to security tokens.

COSE is sadly not a plain copy of JOSE in CBOR, but has also made some fixes to the datatypes that weren't too nice in JOSE (according to the RFC). Would you be interested in providing COSE functionality through this package, or do you think it should live in a separate repository?

frasertweedale commented 4 years ago

@arianvp on the one hand, I think it makes sense to not have another library. Or perhaps the COSE library could wrap this one, to avoid reimplementing everything.

On the other hand, I have no need or desire to implement COSE right now. If you want to tackle it I will be happy to assist.