Enabled RS256 signature for JWT access tokens #358
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Proposed changes
Modified
generateJwtTokenmethod in /models/model_oauth_server.js to allow signing the JWT access token with RS256 (asymmetric) algorithm when set throughconfig.oidc.jwt_algorithmattribute orIDM_OIDC_JWT_ALGORITHMenv variable.This allows for an easier integration with common OAuth 2.0 libraries such as Spring Security OAuth 2.0 Resource Server.
Closes #357
Types of changes
What types of changes does your code introduce to the project: Put an
xinthe boxes that apply
to not work as expected)
Checklist
Put an
xin the boxes that apply. You can also fill these out after creatingthe PR. If you're unsure about any of them, don't hesitate to ask. We're here to
help! This is simply a reminder of what we are going to look for before merging
your code.
CONTRIBUTING
doc
CLA
works
modules