Questions tagged [jwk]

A JSON Web Key is a JSON data structure that represents a cryptographic key.

A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key.

The specification for this structure is in RFC 7517.

218 questions
0
votes
1 answer

how to extract jwk from identityServer4 in java spring

I am currently using library jwks-rsa. I want to extract the public key from identityServer4. DecodedJWT jwt = JWT.decode(token); try { URL url = new URL("https://localhost:31300/.well-known/openid-configuration/jwks"); JwkProvider…
michael
  • 83
  • 1
  • 5
0
votes
1 answer

How to create or generate JWKS key (use for encryption - enc) in identityserver4

I want to implement jwks key with Identityserver4 for jwks endpoint, I've already checked alot of articles but no one can solve my requirement Here's is my requirement. RSA encryption key with a 3072-bit key { "kty": "RSA", "use": "enc", "kid":…
0
votes
1 answer

Empty keys when generating JSON Web Key Set (JWKS)

I'm trying to create a JSON web key set for use with a node.js API client. However when logging my keys they seem to be empty. const {JWKS} = require("jose"); const keyAlg = "RSA"; const keySize = 2048; const keyUse = "sig"; const alg =…
Sami
  • 1,374
  • 1
  • 16
  • 43
0
votes
1 answer

Verify and decode Cognito JWT in nodejs with smallest code footprint

I have an application that runs as AWS Lambda function using Cognito authentication. It all works fine but now I am attempting to optimise the bundle size to reduce cold start times. The process of verifying and decoding the JWT involves: Fetch JWK…
jugglingcats
  • 698
  • 9
  • 29
0
votes
2 answers

how to create jwk key for canvas?

In canvas, in order to have an LTI app authenticate, the site admin has enter the JWK for the remote site. The format of a JWK is well defined: { "kty":"RSA", "kid":"...", "use":"sig", "alg":"RS256", "n":"u6gqiV...", "e":"AQAB" } First, can we use…
Dov
  • 8,000
  • 8
  • 46
  • 75
0
votes
0 answers

How to use io.jsonwebtoken lib to validate a Google id_token

We are trying to validate an id_token from Google in a service. I am trying to use the io.jsonwebtoken Java API (https://github.com/jwtk). Additionally the JWKS are here: https://www.googleapis.com/oauth2/v3/certs I won't paste the JWKS here, but I…
kgwrocks
  • 1
  • 2
0
votes
1 answer

Android SecretKey AES and JWK : How to convert

I have an app what needs to share private AES keys. (they are wrapped). The server will send and receive the keys in JWK format. For the moment, in android I can generate AES KEY like this : public SecretKey generate() throws…
Oytoch
  • 153
  • 1
  • 1
  • 15
0
votes
0 answers

Delphi how to create JSON Web Keys (jwk)

Delphi 10.4.1 I am developing a REST application for which I am required to create RSA/RS256 keys and publish my public key in jwk format service. Does anyone know how to generate jwk keys or convert an RSA key set to jwk format. The only utility I…
ZS Leo
  • 1
0
votes
1 answer

Will my tokens still be possible to validate, if I have two different certificates based on the same private key?

For my Identity Server 4, we have two different servers set up to host the application. I asked our operations team to install the same certificate on the two servers. However, they both have received different thumbprints, and the values in the…
0
votes
1 answer

How I can get proper public keys for apple signin

I'm trying to implement apple signin and get a token from appleid provider and i've found out the jwks-client can do the trick but I can't get necessary keys. For some reason it returns nothing as a public key. What uri I need to use to get public…
user14412785
0
votes
1 answer

How to convert 65537 to AQAB in golang

I'm writing some unit and integration tests around JWT creation and validation. I'm hacking together a quick JWKS page using real (well self-signed) certs I created with openssl, and I was cooking along until I got to this very simple problem: The…
Cade Thacker
  • 105
  • 2
  • 9
0
votes
0 answers

How to sign JWT from a JWKSet file?

I want to sign JWT token from a local jwk file containing keys in JWKSet. I'm trying to achieve this by loading json file in JWTSet object and then sign the token with it but it through an exception that signer need to have private key. Is there a…
0
votes
2 answers

In a JSON array, how to search for a certain record returned by ConvertFrom-Json?

With Powershell 6 I am able to download a file in JSON format with: PS C:\> Invoke-WebRequest https://login.microsoftonline.com/common/discovery/v2.0/keys | >> ConvertFrom-Json | >> Select-Object -expand keys kty : RSA use : sig kid :…
Alexander Farber
  • 21,519
  • 75
  • 241
  • 416
0
votes
1 answer

AWS Cognito JWK throws error but other oauth2 endpoints are fine

I've just configured my custome domain for AWS congito and wanted to connect my Resource Server (Spring Boot). Since I received a 400, I crosschecked the Endpoint manuelly and received the same response: Postman attempt. Did anyone encounter this…
0
votes
1 answer

How can I convert PKCS8 to JWK format given the openssl commands below

How can I convert PKCS8 to JWK format given the openssl commands below? openssl genrsa -des3 -passout pass:foobar -out private_key_des3_with_password.pem 2048 openssl pkcs8 -topk8 -inform PEM -in private_key_des3_with_password.pem -outform PEM -out…