jwt-authorizer/config
Sjoerd Simons ef8ac07271 Add support for reading keys from a static JWKS
Allow creating authorizer from JWKS files similar to other static
certificates.

Signed-off-by: Sjoerd Simons <sjoerd@collabora.com>
2023-10-08 08:51:09 +02:00
..
ecdsa-private1.pem chore: key file renaming 2023-02-12 09:04:38 +01:00
ecdsa-private2.pem chore: key file renaming 2023-02-12 09:04:38 +01:00
ecdsa-public1.pem chore: key file renaming 2023-02-12 09:04:38 +01:00
ecdsa-public2.pem chore: key file renaming 2023-02-12 09:04:38 +01:00
ed25519-private1.pem chore: key file renaming 2023-02-12 09:04:38 +01:00
ed25519-private2.pem chore: key file renaming 2023-02-12 09:04:38 +01:00
ed25519-public1.pem chore: key file renaming 2023-02-12 09:04:38 +01:00
ed25519-public2.pem chore: key file renaming 2023-02-12 09:04:38 +01:00
public1.jwks Add support for reading keys from a static JWKS 2023-10-08 08:51:09 +02:00
README.md Add support for reading keys from a static JWKS 2023-10-08 08:51:09 +02:00
rsa-private1.pem chore: key file renaming 2023-02-12 09:04:38 +01:00
rsa-private2.pem chore: key file renaming 2023-02-12 09:04:38 +01:00
rsa-public1.pem chore: key file renaming 2023-02-12 09:04:38 +01:00
rsa-public2.pem feat: configurable validation (validation: iss, aud, exp, nbf, leeway) (fixes #1) (#4) 2023-02-26 20:30:55 +01:00

Key generation

RSA

openssl genrsa -out rsa-private2.pem 1024 openssl rsa -in rsa-private2.pem -out rsa-public2.pem -pubout -outform PEM

EC (ECDSA) - (algorigthm ES256 - ECDSA using SHA-256)

curve name: prime256v1 (secp256r1, secp384r1)

openssl ecparam -genkey -noout -name prime256v1 | openssl pkcs8 -topk8 -nocrypt -out ec-private.pem

openssl ec -in ec-private.pem -pubout -out ec-public-key.pem

EdDSA - Edwards-curve Digital Signature Algorithm

(Ed25519 - EdDSA signature scheme using SHA-512 (SHA-2) and Curve25519)

openssl genpkey -algorithm ed25519

JWK - combined file of above keys

rnbyc -j -f rsa-public1.pem -k rsa01 -a RS256 -f ecdsa-public1.pem -k ec01 -a ES256 -f ed25519-public1.pem -k ed01 -a EdDSA -o public1.jw