Questions tagged [jwk]

A JSON Web Key is a JSON data structure that represents a cryptographic key.

A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key.

The specification for this structure is in RFC 7517.

218 questions
1
vote
1 answer

creating JWK and JWS using jose, however getting error "unsupported algorithm"

I have to encrypt the payload using ES256 algorithm. Also have to use kid in JWK as described in below code. I am using the jose libraries for creating signature. Below is the code: var jose = require("node-jose"); async function a1(){ try { …
priyanka mane
  • 35
  • 1
  • 5
1
vote
1 answer

Converting from a Public Microsoft.IdentityModel.Tokens.JsonWebKey.JsonWebKey to RSAParameters (Public Key)

Essentially, I'm looking to convert a Public Microsoft.IdentityModel.Tokens.JsonWebKey.JsonWebKey to RSAParameters to then use in an RSA Instance. After this, i'm creating an Azure KeyVault JsonWebKey so I can import this key into my vault. I…
Matt A
  • 13
  • 3
1
vote
1 answer

Generate a pair of private and public keys in python

I need to generate a pair of private and public keys in Python. I used to generate them on the site mkjwk, but I want to automate this process. I need to generate keys in a format like the ones highlighted in yellow in the picture. I tried to use…
Helen
  • 463
  • 2
  • 9
  • 23
1
vote
1 answer

Migration to IdentityServer 4.1 and IDX10501 error

I'm currently trying a migration from IdentityServer 3.x to 4.1.1, and I have followed this migration guide: https://docs.abp.io/en/abp/4.0/Migration-Guides/Abp-4_0 The problem is that I got an IDX10501 error now, please have a look at the full log…
ClubberLang
  • 1,624
  • 3
  • 21
  • 45
1
vote
1 answer

How to extract the public key from jwk returns from identity server 4 in nodejs?

I am using jose npm packege. var http = require('http'); var { default: parseJwk } = require('jose/jwk/parse'); http.get('http://hostname/.well-known/openid-configuration/jwks', (resp) => { let data = ''; // A chunk of data has been…
Chatar Singh
  • 943
  • 9
  • 13
1
vote
2 answers

How to use RSA as kty jwk parameter (using jose4j)

I am using jose4j to encrypt a String with JWE, following this documentation https://bitbucket.org/b_c/jose4j/wiki/JWE%20Examples In the example, they used {\"kty\":\"oct\",\"k\":\"Fdh9u8rINxfivbrianbbVT1u232VQBZYKx1HGAGPt2I\"} It works well, but…
Sushi
  • 646
  • 1
  • 13
  • 31
1
vote
1 answer

Python AuthLib Resource Server using a BearerTokenValidator with Multiple Strategies

I have a resource server (built with Flask, but not sure if that matters right now) that has a RESTful API. The API is secured with OAuth2 access tokens and scopes. Currently the access tokens are opaque (not JWT) and the resource server needs to…
niltz
  • 1,014
  • 11
  • 28
1
vote
0 answers

How to pass claims and expiration time to a JWE?

I am playing with node-jose (https://github.com/cisco/node-jose) and it's not helping much. Should I wrap a JWE in a JWT payload (or the opposite) maybe? This is a sample code I am using to make some tests: const jwe = await…
Victor Ferreira
  • 6,151
  • 13
  • 64
  • 120
1
vote
0 answers

Protobuf equivalent to JWK

JWK is a handy standard, but it has a lot of intrinsic overhead: string parsing, base64 encoding, etc. Is there a protobuf equivalent? Bonus points if it's on a standards track! I've come across tink which seems to have some such functionality, but…
alkalinity
  • 1,750
  • 2
  • 21
  • 32
1
vote
0 answers

Outputting JWT with embedded signature

I have the following code, utilising the node-jose library from Cisco: const jose = require('node-jose'); async function initialize() { // 1 const keystore = jose.JWK.createKeyStore(); // 2 const props = { use: 'sig', alg:…
Nick Bull
  • 9,518
  • 6
  • 36
  • 58
1
vote
3 answers

How to verify a JWT with RS256 signature in Deno?

I want to verify a signature from a Google JWT which uses RS256 as signature algorithm as of right now (Certs from Google: https://www.googleapis.com/oauth2/v3/certs), and the only libary which i could find for Deno handles HS256…
Eden
  • 53
  • 7
1
vote
1 answer

Using ServiceStack for custom JWT verification without user credentials

I'm new to ServiceStack and using it to provide an endpoint that will receive incoming requests from a remote service. No end user is involved. The authentication flow goes like this (as specified by the author of the remote service): "Their"…
DaBozUK
  • 590
  • 1
  • 8
  • 24
1
vote
1 answer

Why doesn't jwks(JSON Web Key Sets) standard just pass public key in pem form instead of the using modulus and exponent?

By the JWKS standard, public keys are exposed in the format of { "keys": [ { "alg": "RS256", "kty": "RSA", "use": "sig", "x5c": [ …
Hansen W
  • 1,028
  • 1
  • 10
  • 17
1
vote
0 answers

Unable to validate token: Couldn't retrieve remote JWK set

I'm setting up an authentication method on Nexus Hybrid Access Gateway based on OpenID Connect, using ADFS as an identity provider. The goal is to access Nexus Hybrid Access Gateway using the OpenID Connect authentication method. When configuring…
AbdelO
  • 11
  • 3
1
vote
1 answer

How to generate pem from jwk in go

I'm trying to generate a pem string using github.com/lestrrat-go/jwx/jwk. But so far I coudn't, I'm guessing it's because I'm new to go and there's something I'm not understanding. I have gone through the relevant examples of this library. My code…
Russo
  • 301
  • 3
  • 12