JWT

The plug-in now supports keys in this format (PKCS#8)

• The createtoken and createtokenwithcustomclaims functions now supports PKCS#8 (RSA only) private keys in addition to PKCS#1
• The validatejwtsignature function now supports the RSA256 algorithm in addition to RSA512

Hi Team, 

I have seen that the decodeJWT function returns the decoded token but only if the signature is valid, otherwise it returns null. 

Is there a way to decode a token without validating the signature? I mean, something similar to the jwtdecode function of the JWT Functions plug-in.

Thanks in advance.

@paolob005 , are you able to resolve this error.

Hello

I have a JWKS repository with a mutual authentification (mTLS)
I imported a client certificat in "Client Certificates" of the admin console (docs.appian.com/.../Appian_Administration_Console.html
It is now OK from a stantard appian integration object, I can get the list of certificats

But with the JWT plugin, I have this error :

Caused by: com.auth0.jwk.NetworkException: Cannot obtain jwks from url https://XXXXX/oauth2/v1/keys
at com.auth0.jwk.UrlJwkProvider.getJwks(UrlJwkProvider.java:139)
at com.auth0.jwk.UrlJwkProvider.getAll(UrlJwkProvider.java:145)
at com.auth0.jwk.UrlJwkProvider.get(UrlJwkProvider.java:163)
at com.appiancorp.cs.plugins.jwtTools.jwt.InvalidableCache$2.call(InvalidableCache.java:43)
at com.appiancorp.cs.plugins.jwtTools.jwt.InvalidableCache$2.call(InvalidableCache.java:38)
at com.google.common.cache.LocalCache$LocalManualCache$1.load(LocalCache.java:4876)
at com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3528)
at com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2277)
... 262 more
Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure

It looks like mTLS is not managed by the plugin (handshake_failure)
Can you confirm this and is it possible to upgrade the plugin?

• Updated jackson databind, jwks-rsa, and guava libraries. Added License File.

1. Adding iat to createtoken and createtokenwithcustomclaims
2. Remove iss and aud when null

• Updated the bouncycastle bcpkix and bouncycastle bcprov libraries.

I am trying to decode a token and I am receiving a null response. I am using the function decodeJWT() and in the parameter "jwksURL" I am using the same domain ( "">example.com/.../jwks.json" ) as when creating the token with the function "createtokenwithcustomclaims()".

I created the private key with format PKCS#1 and I put the token on jwt.io and nothing is wrong with it.

Any suggestions on what could be wrong?

• new "ver" header parameter for the createTokenWithCustomClaims Function as some specific systems require a "ver" header