CAS 6.1.* / OAuth and RSA Signing JWT token configuration

69 views
Skip to first unread message

Cédric Soret

unread,
Jan 27, 2021, 5:30:29 PM1/27/21
to CAS Community
Hello,

I'm facing an issue. I'm trying to configure OAuth JWT access tokens for one service signed with RSA (RS512) but keeping the payload unencrypted.
Current tokens signed with HS512 work fine actually.

Do someone know a proper way to achieve that goal please ?  

Here are some configs samples :

# OAuth token
cas.authn.oauth.crypto.encryption.key=Xt- ...  vCuVdT_URQ
cas.authn.oauth.crypto.signing.key=file:/etc/cas/config/svmlx-cas-dev_private.key
cas.authn.oauth.crypto.alg=??? A256GCM | RSA | RS512
cas.authn.oauth.crypto.enabled=false
cas.authn.oauth.crypto.signingEnabled=true
cas.authn.oauth.crypto.encryptionEnabled=false

cas.authn.oauth.accessToken.crypto.encryption.key=Xt-YRnk ... URQ
cas.authn.oauth.accessToken.crypto.signing.key=file:/etc/cas/config/private.key
cas.authn.oauth.accessToken.crypto.alg=A256GCM
cas.authn.oauth.accessToken.crypto.enabled=false
cas.authn.oauth.accessToken.crypto.signingEnabled=true
cas.authn.oauth.accessToken.crypto.encryptionEnabled=false

Thank you in advance.


Reply all
Reply to author
Forward
0 new messages