René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Use symmetric crypto for github_token","articleBody":"Thanks for a [nice writeup][1]! You suggest using asymmetric encryption for encrypting the real token and signing the JWT. This works well; however, we never use the private/public keys on different machines, so we could go for symmetric crypto instead. This would make the resulting token shorter (probably because [RSA needs padding][2] but there might be some other stuff I don't know about):\r\n\r\n```shell\r\n$ echo \"${REAL_TOKEN}\"\r\n7e096a6633471a2c967718d4b435f0ecdac5c426\r\n\r\n$ echo \"${REAL_TOKEN}\" | openssl rsautl -encrypt -inkey public.pem -pubin | wc -c\r\n256\r\n\r\n$ echo \"${REAL_TOKEN}\" | openssl rsautl -encrypt -inkey public.pem -pubin | base64\r\nTmqTx2ri6FC1ybGdVKiKQQHb3+Ns/iDJ7MfaXPswDfXA0Nhtqu4lxWv+ZDP209cPFXk8zOCIVttH\r\nGMV8Sj8/+bBjPQqXWoA8KZugxzivgMoEgBGhGRFC51b0X2aj/aA2T0D19d1L3YRjN+WpuVx5IXD+\r\njTrBFu53YZRq6igHlQtcG2Z115N9TE+o4vwEts0UXslc6LnbEXmPo+xo2Hg68I4P6USdt/ES/Xqn\r\ndJodhz6nS9wSe2YxuZ5tRm8jrSLqBn/uiyTh7U8K7jQlqRYqsdbK3WtPDLJmchyOiOeCp5rZ0Pcp\r\nris2W1wVKDIBRmF5ZdEBPxRh/aF/LCV6gacNKw==\r\n\r\n$ echo \"${REAL_TOKEN}\" | openssl aes-256-cbc -salt -kfile private.pem -iter 1 | wc -c\r\n64\r\n\r\n# The key can also be derived from a string (i. e. `app.secret` for Flask)\r\n# – easier to manage\r\n$ echo \"${REAL_TOKEN}\" | openssl aes-256-cbc -salt -k \"hello\" -iter 1 | base64\r\nU2FsdGVkX18Za6G3LLM2Djs+Qj+Z4o/0R83IVVizzJfQp8eEbhYfdgmtpi3qItW5YmMUZ8NaKe0Q\r\nbH6Hvs2sKQ==\r\n```\r\n\r\nWhat do you think? :)\r\n\r\n[1]: https://blog.thea.codes/building-a-stateless-api-proxy/\r\n[2]: https://en.wikipedia.org/wiki/RSA_(cryptosystem)#Padding","author":{"url":"https://github.com/notpushkin","@type":"Person","name":"notpushkin"},"datePublished":"2019-05-30T10:28:07.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/7/magic-github-proxy/issues/7"}