Jacques Le Roux created OFBIZ-11187:

             Summary: Use a JWT keyprovider
                 Key: OFBIZ-11187
                 URL: https://issues.apache.org/jira/browse/OFBIZ-11187
             Project: OFBiz
          Issue Type: Improvement
          Components: framework
    Affects Versions: Trunk
            Reporter: Jacques Le Roux

There are several more or less ways to keep a JWT secret key safe. They are 

An even not costly and safer way is [to use a JWT keyprovider 
|https://github.com/auth0/java-jwt#using-a-keyprovider]. I think we should 
consider to do something like in the example demonstrated in this page, and as 
suggested there:

bq.    "with a simple key rotation using JWKS, try the jwks-rsa-java library."

This message was sent by Atlassian Jira

Reply via email to