Initial implementation, plus test programs.

test/key.pem

@@ -0,0 +1,3 @@
+-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIKdtC04YbRMO0L4ID4YOWLr2AxYpQZYZ3g9BNpVm+IjDdn4H5HaYwYvOcbdjKyRdmwm+rsrIbWxCGYQCD5TtaCnq1IGwOueoprgCTDNSpTxsKQ+JuEUIhKc4rygVhX7JKIvVikfWimKVuNJBVhut/O+/N0AarasszAyinc3gjwtu2SyLBdZtIe3Krs1MIvYb786J2RhK3GfLzrXVzmKjA2/ThB9D6sS7dtZCe//37kYZzGUv5+xFkjkKwZr2aULMlmpUosFd/S2w3zsZkGRELLTvdRf5PVKeGpk40EneETJAHwiMjX6+jO/vlFQIj/Ye66ypVhCCI+NizE/hWbdawIDAQAB
+-----END PUBLIC KEY-----

test/mosquitto.conf

@@ -9,6 +9,8 @@ log_type all
 allow_anonymous true
 
 auth_plugin /home/jimmy/Develop/mosquitto-plugin/build/libjwp-plugin.so
+auth_opt_issuer https://auth.jpace121.net/realms/jpace121-main
+auth_opt_public_key /home/jimmy/Develop/mosquitto-plugin/test/key.pem
 
 # -----------------------------------------------------------------
 # External authentication and topic access plugin options

test/python-client.py

@@ -0,0 +1,39 @@
+import requests
+import json
+import time
+import paho.mqtt.client
+import time
+
+
+# Get urls.
+well_known = requests.get("https://auth.jpace121.net/realms/jpace121-main/.well-known/openid-configuration").json()
+auth_url = well_known['device_authorization_endpoint']
+token_url = well_known['token_endpoint']
+
+header = {"Content-Type":"application/x-www-form-urlencoded"}
+data = {"client_id" : "jpace-mqtt"}
+
+# Request login.
+r = requests.post(auth_url, headers=header, data=data)
+r_json = r.json()
+print("Go to: {} to login.".format(r_json['verification_uri_complete']))
+
+# Wait for token.
+data['grant_type'] = "urn:ietf:params:oauth:grant-type:device_code"
+data['device_code'] = r_json['device_code']
+for index in range(1, 20):
+    r = requests.post(token_url, headers=header, data=data)
+    if 'access_token' in r.json():
+        break
+    time.sleep(r_json['interval'])
+
+token = r.json()['access_token']
+print(token)
+
+client = paho.mqtt.client.Client(protocol=paho.mqtt.client.MQTTv5,
+                                 transport="tcp")
+client.username_pw_set("jimmy", password=token)
+client.connect("localhost", port=8081)
+
+print("Waiting on connection.")
+time.sleep(20)

test/python-ex.py

@@ -0,0 +1,33 @@
+import requests
+import json
+import time
+import jwt
+
+# Get urls.
+well_known = requests.get("https://auth.jpace121.net/realms/jpace121-main/.well-known/openid-configuration")
+well_known = well_known.json()
+auth_url = well_known['device_authorization_endpoint']
+token_url = well_known['token_endpoint']
+
+header = {"Content-Type":"application/x-www-form-urlencoded"}
+data = {"client_id" : "jpace-mqtt"}
+
+r = requests.post(auth_url, headers=header, data=data)
+r_json = r.json()
+
+print("Go to: {} to login.".format(r_json['verification_uri_complete']))
+
+data['grant_type'] = "urn:ietf:params:oauth:grant-type:device_code"
+data['device_code'] = r_json['device_code']
+
+for index in range(1, 20):
+    r = requests.post(token_url, headers=header, data=data)
+    if 'access_token' in r.json():
+        break
+    time.sleep(r_json['interval'])
+
+public_key = b"-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIKdtC04YbRMO0L4ID4YOWLr2AxYpQZYZ3g9BNpVm+IjDdn4H5HaYwYvOcbdjKyRdmwm+rsrIbWxCGYQCD5TtaCnq1IGwOueoprgCTDNSpTxsKQ+JuEUIhKc4rygVhX7JKIvVikfWimKVuNJBVhut/O+/N0AarasszAyinc3gjwtu2SyLBdZtIe3Krs1MIvYb786J2RhK3GfLzrXVzmKjA2/ThB9D6sS7dtZCe//37kYZzGUv5+xFkjkKwZr2aULMlmpUosFd/S2w3zsZkGRELLTvdRf5PVKeGpk40EneETJAHwiMjX6+jO/vlFQIj/Ye66ypVhCCI+NizE/hWbdawIDAQAB\n-----END PUBLIC KEY-----"
+
+#decoded = jwt.decode(r.json()['access_token'], audience=None, options={"verify_signature": False, 'verify_aud': False})
+decoded = jwt.decode(r.json()['access_token'], public_key, algorithms=['RS256'])
+print('Decoded: {}'.format(decoded))