Mojo-JWT icon indicating copy to clipboard operation
Mojo-JWT copied to clipboard

Add support for ECC signatures by switching to Crypt::PK::*

Open yoe opened this issue 4 years ago • 1 comments

There is no Crypt::OpenSSL::* module to support ECC signatures, which the JWT standard specifies. As a result, this module currently does not support ECC tokens, only HMAC and RSA ones.

Switch to Crypt::PK::* instead, which does have a ECC module that has the exact same API as its RSA counterpart.

As an added advantage, Crypt::PK::RSA also supports importing/exporting RSA keys in JWK format, which Crypt::OpenSSL::RSA does not. This might be useful for a module dealing with JSON Web Tokens.

Signed-Off-By: Wouter Verhelst [email protected]

yoe avatar Jun 12 '20 12:06 yoe