A JSON Web Key is a JSON data structure that represents a cryptographic key.
A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key.
The specification for this structure is in RFC 7517.
Questions tagged [jwk]
218 questions
0
votes
1 answer
What is the Firebase Auth Session Cookie JWK URL?
With a regular Firebase auth ID token we can verify using the JWK URL of https://www.googleapis.com/service_accounts/v1/jwk/securetoken@system.gserviceaccount.com
If you make a Session Cookie instead, where the issuer is…
Arjun Yelamanchili
- 577
- 1
- 3
- 16
0
votes
1 answer
JSON Web Key (JWK) for IRS E services registration
While signing up for the IRS E-services they are requesting a JSON Web Key (JWK). they want the following fields in the JWK
kid, kty, use, n, e, x5t, x5c.
The "kty" field should be equal to "RSA".
In this answer it is shown how to generate the keys…
user17986807
- 1
- 1
0
votes
2 answers
How to create a JSON Key Set from two JSON string
I have two json string coresponding to "sig" and "enc".
String a={ "kty": "someText", "e": "someText", "use": "sig", "kid": "someText", "alg": "someText", "n": "someText"}
String b= { "kty": "someText", "e": "someText", "use": "enc", "kid":…
Q2Dev
- 85
- 1
- 9
0
votes
1 answer
JWKS rotation on K8S cluster
I read in documentation of K8S https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-issuer-discovery
But i can't find in documentation and online when K8S rotates the key? Each day/week/month/other…
tamirz12345
- 47
- 2
- 8
0
votes
1 answer
PHP : verify JWS with JWK (x5c)
Context: I want to implement payment with Payconiq. When the payment is done, Payconiq calls my API to give me payment information (status, etc).
I'm using Symfony and web-token/jwt-bundle to verify JWS.
1/ I use 'base64_decode' to get the header…
empty
- 11
- 2
0
votes
1 answer
MSAL 2.0 Bearer token invalid
I'm trying to upgrade out current MSAL 1.4 auth strategy to MSAL 2.0
I can successfully login and get an Access token using msal-browser, however when I try pass that to our backend as a Bearer Token I get an Invalid Token error.
Our current backend…
Dan Kelly
- 2,634
- 5
- 41
- 61
0
votes
1 answer
subscribe to OIDC provider's certificate changes
As per some articles I have read AddJwtBearer() in .net core caches the keys in the OIDC provider's discovery document and use it to validate the authentication token in the request. As per the following article…
manura
- 31
- 1
- 6
0
votes
1 answer
Creating a JWK server to servex keys in kubernetes
I am trying to create a JWK server in a pod (on k8s) which would serve the keys when a request for a particular kid comes in. I create the JWK using the generate function
func (s *jwkServer) startJWKServer() {
privateKey, err :=…
The_Lost_Avatar
- 992
- 5
- 15
- 35
0
votes
0 answers
Quarkus JWKS refresh blocking
I have created REST resource with RestEasy reactive in Quarkus. It's expecting a JWT and is protected with this annotation in method:
@RolesAllowed({"read.access"})
I've defined JWKS URL in properties:
mp:
jwt:
verify:
…
Panu Haaramo
- 2,932
- 19
- 41
0
votes
2 answers
How to use JWKs with spring?
I got the task to implement jwks on the project. On our project, we have implemented a token validation check with oauth2. We use a jks format certificate to obtain a public key. the private key is not used in our project, since we need to check the…
Самир Шахмурадлы
- 775
- 2
- 11
- 23
0
votes
1 answer
c# how to convert a JWK to a RsaSecurityKey
I am trying to verify signatures against a public key, and i got that working using RSACryptoproviders etc.
I set the public key (importing the key in PEM format, reading the rsa parameters and then creating an RsaSecurityKey)
It all works, but now…
BasieP
- 37
- 1
- 7
0
votes
2 answers
Correct Application Structure to Safely Verify Cognito JWT Tokens
I'm building a React application that uses API Gateway and Lambda on the back-end. I'm going through the process of integrating Cognito authentication. I've completed the following:
Generate user pool
Upon login redirect to my React application…
NickC
- 332
- 1
- 15
0
votes
2 answers
How to parse a set of JWK with x5c and verify JWT?
I want to validate a JSON Web Token. The JSON Web Key for the verification are avaiable under this url. Those are JWKs with x509 certificates (x5c). Based on an answer to another question, tried the following:
import …
katexochen
- 402
- 1
- 7
- 17
0
votes
0 answers
How to create a JSON web token by ES265 algorithm?
I use: Delphi JOSE and JWT Library and OpenSSL libraries version 1.0.2
uses
...
JSON,
System.DateUtils,
JOSE.Core.JWT,
JOSE.Core.JWS,
JOSE.Core.JWK,
JOSE.Core.JWA;
...
procedure TForm1.Button1Click(Sender: TObject);
var
LToken:…
HeathRow
- 117
- 1
- 8
0
votes
2 answers
JWK management in openID Connect provider server
I want to implement an OpenID Connect server, I don't know how should I manage JWK for clients? just a single JWK to sing all JWT tokens or generate JWK per client?
I appreciate any tutorial link to help me.
Mehran Prs
- 509
- 4
- 18