Thanks for the correction.. Let me rephrase.. I am in fact trying out JWS
JSON serialization with JWS Header (with protected and unprotected) + JWS
payload.. This is for a sample purpose and looking for a Java library to
achieve this...

Thanks & regards,
-Prabath


On Sat, Jun 7, 2014 at 1:16 AM, Mike Jones <[email protected]>
wrote:

>  JWTs only use the compact serialization.  The last sentence of
> http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-19#section-1
> reads:
>
>    JWTs are always represented using the JWS Compact
>
>    Serialization or the JWE Compact Serialization.
>
>
>
> So if your data structure is actually a JWT, the JSON Serialization isn’t
> relevant.  If it’s not a JWT, which serialization you choose is
> application-specific.
>
>
>
>                                                             -- Mike
>
>
>
> *From:* Prabath Siriwardena [mailto:[email protected]]
> *Sent:* Friday, June 06, 2014 12:43 PM
> *To:* Mike Jones
> *Cc:* [email protected]
> *Subject:* Re: [jose] Java libraries supporting JWS/JWE JSON serialization
>
>
>
> Thanks Mike for the explanation.. In my case I am working with a JWT
> header having both protected and unprotected headers...
>
>
>
> Thanks & regards,
>
> -Prabath
>
>
>
> On Sat, Jun 7, 2014 at 1:02 AM, Mike Jones <[email protected]>
> wrote:
>
> By design, as long as you’re not using features not supported by the
> Compact Serialization, such as unprotected header fields, it’s simply a
> syntactic transformation to go between the two serializations (replacing
> dot-separated fields with the same field values in JSON structures).  This
> is even true if you have multiple signatures over the same content or
> content encrypted to multiple recipients.
>
>
>
>                                                             -- Mike
>
>
>
> *From:* jose [mailto:[email protected]] *On Behalf Of *Prabath
> Siriwardena
> *Sent:* Friday, June 06, 2014 11:54 AM
> *To:* [email protected]
> *Subject:* [jose] Java libraries supporting JWS/JWE JSON serialization
>
>
>
> Are there any Java libraries supporting JWS/JWE JSON serialization?
>
>
>
> I could not find a way with nimbus-jose-jwt...
>
>
>
> Appreciate a lot any pointers...
>
>
>
> Thanks & Regards,
> Prabath
>
>
>
> Twitter : @prabath
>
> LinkedIn : http://www.linkedin.com/in/prabathsiriwardena
>
> Mobile : +94 71 809 6732
>
> http://blog.facilelogin.com
> http://blog.api-security.org
>
>
>
>
>
> --
>
> Thanks & Regards,
> Prabath
>
>
>
> Twitter : @prabath
>
> LinkedIn : http://www.linkedin.com/in/prabathsiriwardena
>
> Mobile : +94 71 809 6732
>
> http://blog.facilelogin.com
> http://blog.api-security.org
>



-- 
Thanks & Regards,
Prabath

Twitter : @prabath
LinkedIn : http://www.linkedin.com/in/prabathsiriwardena

Mobile : +94 71 809 6732

http://blog.facilelogin.com
http://blog.api-security.org
_______________________________________________
jose mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/jose

Reply via email to