Uploaded image for project: 'Red Hat 3scale API Management'
  1. Red Hat 3scale API Management
  2. THREESCALE-11474

JWT signature verification, support for ES256

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • None
    • Gateway
    • None
    • False
    • None
    • False
    • Not Started
    • Not Started
    • Not Started
    • Not Started
    • Not Started
    • Not Started

      Details https://github.com/3scale/APIcast/issues/1312

      Dev note:

      APIcast currently using lua-resty-jwt-0.2.0. With recent work done in THREESCALE-11412, we now can upgrade lua-resty-jwt to latest version 0.2.3 which added support for ES256/ES512

      Support algorithm

        RHKB 24 lua-resty-jwt 0.20 lua-resty-0.2.2 lua-resty-0.2.3
      client_secret_jwt HS256
      HS384
      HS512      		 HS256
      HS512      		 HS256
      HS512      		 HS256
      HS512
      private_key_jwt RS256
      RS382
      RS512
      ES256
      ES384
      ES512
      PS256
      PS384
      PS512      		 RS256 RS256
      ES256      		 RS256
      RS512
      ES256
      ES512

      Update 15/11/2024

      lua-resty-jwt v0.2.1 and later have switched to using v3 format for rockspec and it is not compatible with luarocks v2, so we will need to upgrade luarocks to v3 to be able to install the newer version of lua-resty-jwt

              Unassigned Unassigned
              rhn-support-atra An Tran
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: