Uploaded image for project: 'Thorntail'
  1. Thorntail
  2. THORN-2346

Possibility to skip token signature verification in MP-JWT

    Details

    • Type: Feature Request
    • Status: Closed (View Workflow)
    • Priority: Minor
    • Resolution: Won't Fix
    • Affects Version/s: 2.3.0.Final
    • Fix Version/s: 2.6.0.Final
    • Component/s: microprofile
    • Labels:
      None
    • Story Points:
      5

      Description

      Hi guys,

      We have some microservices communicating with each other and would like to have the option to skip the validation of the signature, since it is proving to have some performance cost. Would it be possible to have a flag which would disable the signature verification like in the example below? But of course leave it on as default.

      thorntail:
        microprofile:
          jwt:
            token:
              skip-signature-verification: true
              jwks-uri: http://localhost:8067/auth/realms/realm/protocol/openid-connect/certs
              issued-by: http://localhost:8067/auth/realms/realm
      
      

      Cheers!

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                sbiarozk Sergey Beryozkin
                Reporter:
                gurras David Dahlin
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: