Skip to content
Novus Examples
json1.1 KB

SAMPLE JWS — General JSON Serialization

One payload carrying two independent signatures — RS256 and EdDSA — in the General JSON serialization that the compact form cannot express. Multi-signature handling is the part of RFC 7515 most libraries never implemented.

JWT / JWKS testingAPI testing
Preview — first 20 linesjson
{
  "payload": "eyJpc3MiOiJodHRwczovL2lzc3Vlci5wa2kuc2FtcGxlLmV4YW1wbGUvIiwic3ViIjoidXNlci1zYW1wbGUtMDAwMSIsImF1ZCI6Im5vdnVzLXA3LXNhbXBsZS1hcGkiLCJpYXQiOjE3NjcyMjU2MDAsIm5iZiI6MTc2NzIyNTYwMCwiZXhwIjoyMDgyNzU4NDAwLCJqdGkiOiJub3Z1cy1wNy1zYW1wbGUtMDAwMSIsIm5hbWUiOiJTYW0gUml2ZXJhIChTQU1QTEUpIiwic2NvcGUiOiJyZWFkOnNhbXBsZSJ9",
  "signatures": [
    {
      "protected": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Im5vdnVzLXA3LXJzYS0yMDI2In0",
      "header": {
        "kid": "novus-p7-rsa-2026"
      },
      "signature": "QjfU_T3uAz6HOpDAuyTWKA83R0TMcbPIFr02PAt2DLr5AwG7ST9ILBsZGKBWBmCd943WbdXvdgu9n2G4csGaCThIHKiB5QzCI8RL-Wm8rOJOT4nGt5FxkKla2WN14EVImoe8Ah73mPscRc60DNlaJ85GbUiYdlFLb-u18yeovIlf--x8kKVJjlZWAVm3_CcMTWzkjvnOptzmII6wZWq6Sf5xlXVW36I4OsnlQfTa7q1H0tzYaZb8bOJrYStYwXBSjJhB5dOvn81kKo59PEVPlSI7xa0HdKJ9ca64nF-4XXiIoNV7rLA6STpjOoPcNDO_gW3XhYcfpXgcyCmnirr_hA"
    },
    {
      "protected": "eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCIsImtpZCI6Im5vdnVzLXA3LWVkMjU1MTktMjAyNiJ9",
      "header": {
        "kid": "novus-p7-ed25519-2026"
      },
      "signature": "MS4shQtLznXs9iLmUlQfrFcKxC_F5ZH14pEcjsxZ2K8uA74zC9Qb9-kIkUXXVhbeX7eRYg60hs35bYkc5FskAA"
    }
  ]
}

Specifications

Serialization
JWS General JSON (RFC 7515 Section 7.2.1)
Signatures
2
Algorithms
RS256 and EdDSA
Payload
shared by both signatures
Sample Only
true
Seed
70117

Testing contract

Expected to pass
Scenario
Parse the document and verify each signature entry against its kid from the p7 JWK set.
Expected result
Both the RS256 and the EdDSA signature verify over the same shared payload.

What is a .json file?

JSON (JavaScript Object Notation) is a lightweight, text-based data-interchange format representing objects, arrays, strings, numbers, booleans, and null. It is language-independent, human-readable, and the dominant format for web APIs and configuration. It requires a single well-formed root value.

How to use this file

Use an example JSON file to test parsers and serializers, schema validation, Unicode and number-precision handling, and API request or response processing.

How to use this file for testing

“SAMPLE JWS — General JSON Serialization” is a deterministic Novus Examples fixture for JWT / JWKS testing, API testing. Unsigned and SAMPLE-signed JWT variants plus JWKS documents — published sample material only, for auth parser tests.

Documented properties for this file: seed 70117. Compare results against paired or grouped companions on this page when present (clean↔damaged, searchable↔scanned, or format twins) so scores stay reproducible across runs.

Download the file once, keep the path stable in CI or local scripts, and treat the spec table as the contract: dimensions, seeds, field lists, and roles are intentional. Corrupt or invalid samples are labelled as such — expect parsers to fail loudly rather than silently accept them.

This is published, SAMPLE-only security material — never a real secret. Point certificate, key, or token parsers at it, test PEM/DER decoding and PKCS handling, and confirm your tooling reads the documented fields; any sample password is printed on this page.

These JSON fixtures are synthetic SAMPLE auth or tool-call shapes for harnesses — never production secrets or live tokens. Validate schema fields and alg variants against the documented role.

Code examples

import json

with open("jws-general-json.json") as f:
    data = json.load(f)
print(type(data), len(data))

Related files

Generated by generation/security_p7.py. Free for any use, no attribution required — license.