Stack Overflow
Stack Overflow

Questions tagged [jwk]

A JSON Web Key is a JSON data structure that represents a cryptographic key.

A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key.

The specification for this structure is in RFC 7517.

218 questions
1
vote
2 answers

Cannot Verify JWT Using x5c (x509) public Certificate

UPDATED I'm trying to verify a JWT access token programmatically using the x5c / x509 public key value below. I can get this working by plugging the token and x5c values into external web sites but not programmatically using JavaScript / jsrsasign.…
Mike T
  • 93
  • 1
  • 2
  • 13
1
vote
1 answer

Multiple jwks in IdentityServer

I'm not sure how IdentityServer produces jwks. When I run it I can only see one set of jwks. I see some of the example as like https://login.microsoftonline.com/common/discovery/v2.0/keys which it has multiple jwks. Inside this url, it seems that…
Ong Ming Soon
  • 1,041
  • 1
  • 10
  • 22
1
vote
0 answers

Signing Key Rollover and Naturally Expiring Access Tokens

I am developing an app that uses Azure AD as my OAuth2.0 provider. Azure has a Jwks endpoint with multiple public keys, one of which its corresponding private key was used to sign my token. My app handles signing key resolving by inspecting the…
Joe Berg
  • 774
  • 2
  • 8
  • 21
1
vote
1 answer

Getting params out of an RSA keypair

I want to either generate an RSA keypair and log the pubkey parameters (modulus and exponent, n and e), get the parameters out of an existing set of keys (in der format) or generate a pubkey pair from my own parameters. I was trying to do the first…
Zanny
  • 58
  • 4
1
vote
1 answer

Verifying AWS Cognito JWT IDToken against a JWK Set with njwt

I'm trying to figure out how to verify a user's IDToken obtained from AWS Cognito Identity authenticateUser call. Following the steps found…
Jared Price
  • 5,217
  • 7
  • 44
  • 74
1
vote
1 answer

JWE (JSON Web Encryption) in NODE.JS

I am trying to implement JWE for my Rest API. I came across following NODE library that implements JWE. However the library lack the documentation around how JSON Web Key(JWK) should be used(JSON object) that help in Key Management Mode. The JWE…
D Deshmane
  • 1,125
  • 4
  • 15
  • 27
1
vote
1 answer

How to set proxy server for Json Web Keys

I'm trying to build JWKS object for google JSON web keys to verify the signature of JWT token received from google. Inside our corporate environment, we need to set the proxy server to reach out external one. Below code runs outside the corporate…
Ashok
  • 461
  • 2
  • 5
  • 23
1
vote
1 answer

Google OAuth JWT Verification locally

I am developing a website that has Login with google. once the user has signed in, I get a id token from the google js api and send to to the server to verify it. I can verify and do the process easily with Google token info endpoint, but that will…
Bhanuka Yd
  • 646
  • 8
  • 25
0
votes
0 answers

0Auth 2.0 Getting JWT with Keys using postman

I am trying to get authorization from a FHIR server using JSON Web Key using POSTMAN. This is very new to me and I am trying to understand how this works. I have a public and private key already generated. I gave the key to the authorization server.…
Peter Sun
  • 1,675
  • 4
  • 27
  • 50
0
votes
0 answers

JWKS with TypeScript,Next.js and zeroDev, custom hosted JWKSendpoint

I am trying to make an App with Next.js, TypeScript, JWKS and zeroDev using JWKS endpoints. I can code and decode the JWT using private and public keys with (RSA256) fine, but I am confused what data to put in the JWKS endpoint file, because from…
DeadlyDuck
  • 16
0
votes
1 answer

override the keycloak jwks url for a multi tenancy app?

so I have micro service application where one of those called auth_manager used to authenticate and register new user , I use the auth_manager to get token for user from keycloak , and other services that use that token to secure the request, in my…
kikicoder
  • 383
  • 3
  • 16
0
votes
0 answers

"no key found" using node-jose to verify a JWS

I am trying to verify a jws with node-jose, but no matter what I do, I get an Error: no key found. I believe the issue might come from the fact that my jwks do not have a k parameter. But that is the key I have, I must verify the jws with the key as…
François Maréchal
  • 1
  • 1
0
votes
0 answers

Update jsrsasign from 0.0.3 to 10.8.6

I need assistance in he procedure to update jsrsasign npm library under jws-jwk tree. It's currently giving me the following tree when using npm ls jsrsasign. jws-jwk@0.1.4 └── jsrsasign@0.0.3 I tried npm install jsrsasign@10.8.6 but its adding…
Sachin Choudhary
  • 1
  • 1
0
votes
1 answer

Should rsa keys be scoped by issuer or relying party in OIDC

I am writing a simple, single issuer, open ID connect server. I had planned to have each relying party have its own set of rsa keys for ID token signing. However, now that I am looking at OIDC discovery and the JWKS enpoint, I don't find mention of…
Globoplox
  • 55
  • 6
0
votes
1 answer

construction of ES256KSigner throws mis-match private key length

I tried to build a siger to sign a verifiable credential using jwt format. But the construct of ES256KSigner fails Invalid private key format. Expecting 32 bytes, but got 43. I am not familar with cryption, and only guess there is some wrong…
shijie xu
  • 1,975
  • 21
  • 52
1 2 3
…
14 15