Verifying JWT signed with the RS256 algorithm using public key in C#

by

Thanks to jwilleke, I have got a solution. To verify the RS256 signature of a JWT, it is needed to use the RSAPKCS1SignatureDeformatter class and its VerifySignature method.

Here is the exact code for my sample data:

  string tokenStr = "eyJraWQiOiIxZTlnZGs3IiwiYWxnIjoiUlMyNTYifQ.ewogImlzcyI6ICJodHRwOi8vc2VydmVyLmV4YW1wbGUuY29tIiwKICJzdWIiOiAiMjQ4Mjg5NzYxMDAxIiwKICJhdWQiOiAiczZCaGRSa3F0MyIsCiAibm9uY2UiOiAibi0wUzZfV3pBMk1qIiwKICJleHAiOiAxMzExMjgxOTcwLAogImlhdCI6IDEzMTEyODA5NzAsCiAiY19oYXNoIjogIkxEa3RLZG9RYWszUGswY25YeENsdEEiCn0.XW6uhdrkBgcGx6zVIrCiROpWURs-4goO1sKA4m9jhJIImiGg5muPUcNegx6sSv43c5DSn37sxCRrDZZm4ZPBKKgtYASMcE20SDgvYJdJS0cyuFw7Ijp_7WnIjcrl6B5cmoM6ylCvsLMwkoQAxVublMwH10oAxjzD6NEFsu9nipkszWhsPePf_rM4eMpkmCbTzume-fzZIi5VjdWGGEmzTg32h3jiex-r5WTHbj-u5HL7u_KP3rmbdYNzlzd1xWRYTUs4E8nOTgzAUwvwXkIQhOh5TPcSMBYy6X3E7-_gr9Ue6n4ND7hTFhtjYs3cjNKIA08qm5cpVYFMFMG6PkhzLQ";
  string[] tokenParts = tokenStr.Split('.');

  RSACryptoServiceProvider rsa = new RSACryptoServiceProvider();
  rsa.ImportParameters(
    new RSAParameters() {
      Modulus = FromBase64Url("w7Zdfmece8iaB0kiTY8pCtiBtzbptJmP28nSWwtdjRu0f2GFpajvWE4VhfJAjEsOcwYzay7XGN0b-X84BfC8hmCTOj2b2eHT7NsZegFPKRUQzJ9wW8ipn_aDJWMGDuB1XyqT1E7DYqjUCEOD1b4FLpy_xPn6oV_TYOfQ9fZdbE5HGxJUzekuGcOKqOQ8M7wfYHhHHLxGpQVgL0apWuP2gDDOdTtpuld4D2LK1MZK99s9gaSjRHE8JDb1Z4IGhEcEyzkxswVdPndUWzfvWBBWXWxtSUvQGBRkuy1BHOa4sP6FKjWEeeF7gm7UMs2Nm2QUgNZw6xvEDGaLk4KASdIxRQ"),
      Exponent = FromBase64Url("AQAB")
    });

  SHA256 sha256 = SHA256.Create();
  byte[] hash = sha256.ComputeHash(Encoding.UTF8.GetBytes(tokenParts[0] + '.' + tokenParts[1]));

  RSAPKCS1SignatureDeformatter rsaDeformatter = new RSAPKCS1SignatureDeformatter(rsa);
  rsaDeformatter.SetHashAlgorithm("SHA256");
  if (rsaDeformatter.VerifySignature(hash, FromBase64Url(tokenParts[2])))
    MessageBox.Show("Signature is verified");

//...
  static byte[] FromBase64Url(string base64Url)
  {
    string padded = base64Url.Length % 4 == 0
        ? base64Url : base64Url + "====".Substring(base64Url.Length % 4);
    string base64 = padded.Replace("_", "https://stackoverflow.com/")
                          .Replace("-", "+");
    return Convert.FromBase64String(base64);
  }

More Related Contents:

  1. How to validate signature of JWT from jwks without x5c
  2. JWT authentication for ASP.NET Web API
  3. How to read a PEM RSA private key from .NET
  4. Use multiple JWT Bearer Authentication
  5. C# Export Private/Public RSA key from RSACryptoServiceProvider to PEM string
  6. How to decode JWT Token?
  7. C# RSA encryption/decryption with transmission
  8. How to load the RSA public key from file in C#
  9. C# RSA Public Key Output Not Correct
  10. Signing and verifying signatures with RSA C#
  11. Correctly create RSACryptoServiceProvider from public key
  12. How to store/retrieve RSA public/private key
  13. Is there any JSON Web Token (JWT) example in C#?
  14. .NET Core Identity Server 4 Authentication VS Identity Authentication
  15. how to use RSA to encrypt files (huge data) in C#
  16. Encrypting/Decrypting large files (.NET)
  17. JWT on .NET Core 2.0
  18. RSA Encryption, getting bad length
  19. Digital signature in c# without using BouncyCastle
  20. How to Generate Unique Public and Private Key via RSA
  21. Calculate primes p and q from private exponent (d), public exponent (e) and the modulus (n)
  22. CryptographicException “Key not valid for use in specified state.” while trying to export RSAParameters of a X509 private key
  23. Validate Google Id Token
  24. Error occurred while decoding OAEP padding
  25. Get claims from a WebAPI Controller – JWT Token,
  26. C#: Raising an inherited event
  27. Call static method with reflection
  28. What are the limitations of SqlDependency?
  29. How to choose between private and protected access modifier to encapsulate members between base and childs classes?
  30. C# List – Removing items while looping / iterating [duplicate]

Leave a Comment