JWT Functions

Overview

Allows for an additional layer of security using signed JWT. This plug-in may also be used to integrate with external systems using JWS.

Key Functionality and Features

  • jwtsign - Create a signed JWT using HS256, HS384, HS512, ES256, ES384, ES512, RS256, RS384, or RS512
  • jwtverify - Verify signed JWT
  • jwtgeneratesecretkey - Generate an Hmac-SHA key that can be used to sign a JWT using HS* algorithm
  • jwtdecode - Decode a JWT without verifying the signature

Uses JWTKs JJWT library: https://github.com/jwtk/jjwt

Anonymous
Parents
  • v1.1.0 Release Notes
    • Fixed key ID not being set
    • Added new field in TokenOptions: scsKeyId (boolean) - When set to true, "kid" will automatically be set to the SCS key and field used to sign the token
    • Added new field in DecodeOptions: scsKeyId (boolean) - When set to true, will automatically use "kid" as SCS key and field to verify the token

Comment
  • v1.1.0 Release Notes
    • Fixed key ID not being set
    • Added new field in TokenOptions: scsKeyId (boolean) - When set to true, "kid" will automatically be set to the SCS key and field used to sign the token
    • Added new field in DecodeOptions: scsKeyId (boolean) - When set to true, will automatically use "kid" as SCS key and field to verify the token

Children
No Data