You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@nifi.apache.org by GitBox <gi...@apache.org> on 2021/08/06 03:57:04 UTC

[GitHub] [nifi] exceptionfactory commented on pull request #5262: NIFI-8766 Implemented Public Key Algorithm for JWT Signing

exceptionfactory commented on pull request #5262:
URL: https://github.com/apache/nifi/pull/5262#issuecomment-893981880


   Following additional review of [RFC 7518 Section 8](https://datatracker.ietf.org/doc/html/rfc7518#section-8.3), I adjusted the signing algorithm to `PS512` instead of `RS512` in order to use `RSASSA-PSS` instead of `RSASSA-PKCS1-v1_5`. The Nimbus JWT library supports both algorithms and as a self-contained implementation, this provides better security for signing with the same RSA Key Pair approach.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@nifi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org