JWT signature validation using certificate authority's public key -


i trying this:

on client side: 1. generate json web token (jwt) using header, payload. 2. sign jwt using private key. have certificate signed root ca. 3. send jwt server.

on server side: 1. verify received jwt. 2. have access public key/certificate of root ca has signed certificate.

is possible verify signature of jwt using public key or certificate of root ca. please note not want verify jwt using public key there many clients have private-public ket pairs , not possible server obtain public keys clients. goal make server-side validation use public key/certificate of root ca validate jwt.

is possible?

no not possible in way describe: you'll need actual certificate to:

  1. verify signature on jwt public key in it
  2. verify certificate signed root ca

but again because of 2. don't need exchange certificate out-of-band sender can send certificate along jwt. can satisfy goal anyway since don't have obtain public keys clients separately.


Comments

Popular posts from this blog

python - pip install -U PySide error -

arrays - C++ error: a brace-enclosed initializer is not allowed here before ‘{’ token -

cytoscape.js - How to add nodes to Dagre layout with Cytoscape -