JWT Functions

Overview

Allows for an additional layer of security using signed JWT. This plug-in may also be used to integrate with external systems using JWS.

Key Functionality and Features

jwtsign - Create a signed JWT using HS256, HS384, HS512, ES256, ES384, ES512, RS256, RS384, or RS512
jwtverify - Verify signed JWT
jwtgeneratesecretkey - Generate an Hmac-SHA key that can be used to sign a JWT using HS* algorithm
jwtdecode - Decode a JWT without verifying the signature

Uses JWTKs JJWT library: https://github.com/jwtk/jjwt

jaime casanueva over 1 year ago in reply to manueldavidg0001

I have the same problem! Could it be that it is deprecated?
- Cancel
- Up 0 Down
- Reply
- More
- Cancel
manueldavidg0001 over 1 year ago

We are using this plugin and now it doesn't appear to be downloaded. We have used till PRE and now we need it to go to PRO, but we cannot download from the Market. Could you let us know why has been disabled?

Thanks, Manuel
- Cancel
- Up -1 Down
- Reply
- More
- Cancel
David Jimenez Calleja over 2 years ago

When using de the jwtdecode function, it works properly, but we see this error in Appian logs.

2023-02-10 09:15:43,868 [Appian AppianServerThreadPoolProvider 6155287] ERROR com.appiancorp.type.handlers.BooleanHandler - Expected 1L or 0L but got: false
- Cancel
- Up 0 Down
- Reply
- More
- Cancel
Appian AppMarket over 2 years ago
v2.0.1 Release Notes
- Updated plugin dependency to resolve vulnerability findings:
- CVE-2022-42003
- CVE-2022-42004
- Cancel
- Up 0 Down
- Reply
- More
- Cancel
Appian AppMarket over 2 years ago
Release Notes - v2.0.0
- Added support for JWKS
- JWKS Uri will be derived from the token's issuer field concatenated with jwksPath from DecodeOptions
New Decode Options:
- jwksPath - Path to be appended in the issuer field to retrieve the JWKS
- jwksUri - Override the entire Jwks Uri, if the URI is completely different from the issuer field
- Cancel
- Up 0 Down
- Reply
- More
- Cancel
Appian AppMarket over 3 years ago
v1.2.0 Release Notes
- Security fix - update library dependencies
- Cancel
- Up 0 Down
- Reply
- More
- Cancel
jraaquino over 3 years ago in reply to chandhinir0002

Thanks for the feedback, I'll look into updating the library version
- Cancel
- Up 0 Down
- Reply
- More
- Cancel
chandhinir0002 over 3 years ago

Hi,

We are facing some vulnerability issue while scanning this plugin. Kindly help to check.

Issue:

jackson-databind before 2.13.0 allows a stack overflow exception and denial of service via a large depth of nested objects.

Thanks in advance!
- Cancel
- Up 0 Down
- Reply
- More
- Cancel
oha-dexter-b over 3 years ago in reply to jraaquino

That worked. Thanks!

I'd be very curious on why named-parameters don't work. Let me know if you get time to look into that.
- Cancel
- Up +1 Down
- Reply
- More
- Cancel
jraaquino over 3 years ago in reply to oha-dexter-b

I think it has something to do with using key-based function call - I'm not sure if this is fully supported by plugin functions.

Can you try using order-based function call shown below?

Thanks
- Cancel
- Up +2 Down
- Reply
- More
- Cancel