{"action":"opened","issue":{"url":"https://api.github.com/repos/funcool/buddy-auth/issues/25","labels_url":"https://api.github.com/repos/funcool/buddy-auth/issues/25/labels{/name}","comments_url":"https://api.github.com/repos/funcool/buddy-auth/issues/25/comments","events_url":"https://api.github.com/repos/funcool/buddy-auth/issues/25/events","html_url":"https://github.com/funcool/buddy-auth/issues/25","id":87744158,"number":25,"title":"Question about JWE","user":{"login":"upgradingdave","id":939229,"avatar_url":"https://avatars.githubusercontent.com/u/939229?v=3","gravatar_id":"","url":"https://api.github.com/users/upgradingdave","html_url":"https://github.com/upgradingdave","followers_url":"https://api.github.com/users/upgradingdave/followers","following_url":"https://api.github.com/users/upgradingdave/following{/other_user}","gists_url":"https://api.github.com/users/upgradingdave/gists{/gist_id}","starred_url":"https://api.github.com/users/upgradingdave/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/upgradingdave/subscriptions","organizations_url":"https://api.github.com/users/upgradingdave/orgs","repos_url":"https://api.github.com/users/upgradingdave/repos","events_url":"https://api.github.com/users/upgradingdave/events{/privacy}","received_events_url":"https://api.github.com/users/upgradingdave/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-06-12T14:20:23Z","updated_at":"2015-06-12T14:20:23Z","closed_at":null,"body":"I'm really enjoying using buddy-auth. Thanks much for this work!\r\n\r\nI have a question about JWE (and this is probably more about JWE than buddy-auth, but hoping someone here might be able to shed some light). \r\n\r\nThe JWS and JWE examples are great, thanks for providing those. \r\n\r\nThe way I understand using JWS: 2 programs know a shared secret. One program uses shared secret to sign, and the other program uses the same secret to validate signature. If I understand that correctly, then that makes sense. \r\n\r\nBut I'm a little confused about how to take the JWE example and use it in the real world. If the program that encrypts the payload creates the nonce, then how to share that nonce with the program that needs to decrypt the payload? \r\n\r\nThanks for your help, \r\nDave\r\n\r\n\r\n"}}