jjwt issues

JWT signature does not match locally computed signature only on some POD

12

**Describe the bug** We are using `PS256` as signing algorithm with rotated keys. the app is running on java 11 and deployed in kubernetes. Recently we started to encounter signature...

Fs02

stale

Document how SigningKeyResolver implementations should signal there's no matching key

7

**Is your feature request related to a problem? Please describe.** When building an implementation for `SigningKeyResolver`, the Javadocs for the interface provide no hints as to how an implementation should...

bturner

stale

API update in order to support signing through PKCS#11 (and other)

3

**Is your feature request related to a problem? Please describe.** This issue brings up the issue that it is cumbersome to use JJWT for signing together with a smartcard/HSM as...

netmackan

Explicitly check JCA alg name when looking up SignatureAlgorithms

3

Fixes: #707

bdemers

SecretKeySpec: SignatureAlgorithm ignored -- check broken

6

jjwt 0.11.2 - create a token with a SecretKeySpec: `new SecretKeySpec(MyKeyString, SignatureAlgorithm.HS256.getJcaName())` - check created token and the SignatureAlgorithm is `HS384` instead. If I look at `io.jsonwebtoken.forSigningKey(Key key)` the `SignatureAlgorithm`...

2019-05-10

JWK X5U verification

1

https://datatracker.ietf.org/doc/html/rfc7517#section-4.6 If receiving a JWK with x5u, it must be verified as defined in the above spec section before it can be used. Work to be done in the `jwe`...

lhazlewood

JWE - Explicitly check JCA alg name when looking up SignatureAlgorithms

1

Port #709 to the JWE branch

bdemers

Added EstimateIterationsResult to gather iteration estimate results

POC: ``` EstimateIterationsResult estimateIterationsResult = KeyAlgorithms.estimateIterations(PBES2_HS256_A128KW, 100); int index = 1; for (Result r : estimateIterationsResult.getResults()) { System.out.println("Iteration: " + (index++) + ", workFactor=" + r.getWorkFactor() + ", duration=" +...

dogeared