Equivalent of this Python code

[ardimaunahan]

I'm just wondering if there is someone that can help me convert this sample working Python code to using jose:

import jwt # PyJWT: https://pypi.org/project/PyJWT/

# other codes here...

payload = {
   'iss': CLIENT_ID,
   'scope': SCOPES,
   'aud': CONNECT_ENDPOINT_URL,
   'iat': now,
   'exp': now + 3600,
}

private_key = CERTIFICATE_KEY_FILE.read_bytes()

jwt_assertion = jwt.encode(payload, private_key, algorithm="PS256", headers={'kid': CERTIFICATE_ID})

[panva]

https://github.com/panva/jose/blob/v4.x/docs/functions/key_import.importPKCS8.md
https://github.com/panva/jose/blob/v4.x/docs/classes/jwt_sign.SignJWT.md

import * as jose from 'jose'

const obtainPrivateKeyPEMString = () => {
  return `-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----`;
}

const key = await jose.importPKCS8(obtainPrivateKeyPEMString(), 'PS256');

const jwt = await new jose.SignJWT({
  scope: '...',
})
  .setIssuedAt()
  .setExpirationTime('1h')
  .setIssuer('...')
  .setAudience('...')
  .setProtectedHeader({
    alg: 'PS256',
    kid: '...',
  })
  .sign(key)

console.log(jwt)

[ardimaunahan]

Amazing, it worked! Thanks a lot @panva. But I noticed that I had to add the typ in the setProtectedHeader.

.setProtectedHeader({
    typ: 'JWT',
    alg: 'PS256',
    kid: certificateId
})

In the Python library, it automatically adds that.