Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

✨ Add support for signing JWTs with asymmetric keys #4

Open
2 tasks
maacpiash opened this issue Dec 14, 2024 · 0 comments
Open
2 tasks

✨ Add support for signing JWTs with asymmetric keys #4

maacpiash opened this issue Dec 14, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@maacpiash
Copy link
Owner

maacpiash commented Dec 14, 2024

Using asymmetric keys to sign JWTs would strengthen the overall security and integrity of our system. In this model, our system would generate private-public key-pairs, as many as needed. Then, the JWTs would be signed using a private key and can be verified using the corresponding public key.

We plan to use NetDevPack/Security.Identity for this purpose.

This task consists of two sub-tasks:

  • Configure the DI container and the TokenGenerator to generate key-pairs and use private keys for signing.
  • Expose a ReST endpoint for the JWKS, i.e. the public keys.
@maacpiash maacpiash added the enhancement New feature or request label Dec 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant