NAME

       jose-jwk-pub - Cleans private keys from a JWK

SYNOPSIS

       jose jwk pub -i JWK [-o JWK]

OVERVIEW

       The jose jwk pub command removes all private key material from one or more JWK(Set)
       inputs. The output will contain only public key material.

       If the JWK contains the "key_ops" property, it will be automatically adjusted to include
       only operations relevant to public keys.

OPTIONS

       •   -i JSON, --input=JSON : Parse JWK(Set) from JSON

       •   -i FILE, --input=FILE : Read JWK(Set) from FILE

       •   -i -, --input=- : Read JWK(Set) from standard input

       •   -o FILE, --output=FILE : Write JWK(Set) to FILE

       •   -o -, --output=- : Write JWK(Set) to standard input

       •   -s, --set : Always output a JWKSet

EXAMPLES

       Clean private key material from a JWK:

           $ jose jwk gen -i '{"alg":"ES256"}' -o prv.jwk
           $ cat prv.jwk
           {"alg":"ES256","crv":"P-256","key_ops":["sign","verify"],"kty":"EC", ...}
           $ jose jwk pub -i prv.jwk -o pub.jwk
           $ cat pub.jwk
           {"alg":"ES256","crv":"P-256","key_ops":["verify"],"kty":"EC", ...}

AUTHOR

       Nathaniel McCallum npmccallum@redhat.com

SEE ALSO

       jose-alg(1) <jose-alg.1.adoc>, jose-jwe-enc(1) <jose-jwe-enc.1.adoc>, jose-jwk-exc(1)
       <jose-jwk-exc.1.adoc>, jose-jwk-gen(1) <jose-jwk-gen.1.adoc>, jose-jwk-thp(1)
       <jose-jwk-thp.1.adoc>, jose-jwk-use(1) <jose-jwk-use.1.adoc>, jose-jws-ver(1)
       <jose-jws-ver.1.adoc>

                                                                                  JOSE-JWK-PUB(1)