JWTs only use the compact serialization. The last sentence of
http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-19#section-1 reads:
JWTs are always represented using the JWS Compact
Serialization or the JWE Compact Serialization.
So if your data structure is actually a JWT, the JSON Serialization isn’t
relevant. If it’s not a JWT, which serialization you choose is
application-specific.
-- Mike
From: Prabath Siriwardena [mailto:[email protected]]
Sent: Friday, June 06, 2014 12:43 PM
To: Mike Jones
Cc: [email protected]
Subject: Re: [jose] Java libraries supporting JWS/JWE JSON serialization
Thanks Mike for the explanation.. In my case I am working with a JWT header
having both protected and unprotected headers...
Thanks & regards,
-Prabath
On Sat, Jun 7, 2014 at 1:02 AM, Mike Jones
<[email protected]<mailto:[email protected]>> wrote:
By design, as long as you’re not using features not supported by the Compact
Serialization, such as unprotected header fields, it’s simply a syntactic
transformation to go between the two serializations (replacing dot-separated
fields with the same field values in JSON structures). This is even true if
you have multiple signatures over the same content or content encrypted to
multiple recipients.
-- Mike
From: jose [mailto:[email protected]<mailto:[email protected]>] On
Behalf Of Prabath Siriwardena
Sent: Friday, June 06, 2014 11:54 AM
To: [email protected]<mailto:[email protected]>
Subject: [jose] Java libraries supporting JWS/JWE JSON serialization
Are there any Java libraries supporting JWS/JWE JSON serialization?
I could not find a way with nimbus-jose-jwt...
Appreciate a lot any pointers...
Thanks & Regards,
Prabath
Twitter : @prabath
LinkedIn : http://www.linkedin.com/in/prabathsiriwardena
Mobile : +94 71 809 6732<tel:%2B94%2071%20809%206732>
http://blog.facilelogin.com
http://blog.api-security.org
--
Thanks & Regards,
Prabath
Twitter : @prabath
LinkedIn : http://www.linkedin.com/in/prabathsiriwardena
Mobile : +94 71 809 6732
http://blog.facilelogin.com
http://blog.api-security.org
_______________________________________________
jose mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/jose
