fiware-idm
fiware-idm copied to clipboard
OAuth 2.0-based authentication of users and devices, user profile management, Single Sign-On (SSO) and Identity Federation across multiple administration domains.
Hello everyone, I am trying to setup an `OAuth2` authentication protocol workflow between Keyrock and some applications. I've successfuly done that, but there is something that I dont get it...
## Proposed changes Modified `generateJwtToken` method in /models/model_oauth_server.js to allow signing the JWT access token with RS256 (asymmetric) algorithm when set through `config.oidc.jwt_algorithm` attribute or `IDM_OIDC_JWT_ALGORITHM` env variable. This allows...
Currently, JWT access tokens are signed with SH256 algorithm (the default one provided by `jsonwebtoken.sign` method). Since most Identity Providers use RS256, and this algorithm is more supported by libraries...