Comment on Self-Signed JWTsparentComments−danscanOP1yFair. I assume you mean asymmetric key cryptography and not JWKs in particular? JOSE is a pretty good library if you need the latter and you’re already working in JS−motorest1yFair. I assume you mean asymmetric key cryptography and not JWKs in particular?There's some degree of confusion in your comment. JWKs is a standard to represent cryptographic keys. It is an acronym for JSON Web key set.JOSE is a pretty good library (...)JOSE is a set of standards that form a framework to securely transfer claims.−jacobljohnston1yWe’re using JWKs.−danscanOP1yAh, and just the subtle crypto API to generate keys? Or are you not generating them on the client?
Comments
Fair. I assume you mean asymmetric key cryptography and not JWKs in particular? JOSE is a pretty good library if you need the latter and you’re already working in JS
There's some degree of confusion in your comment. JWKs is a standard to represent cryptographic keys. It is an acronym for JSON Web key set.
JOSE is a set of standards that form a framework to securely transfer claims.
We’re using JWKs.
Ah, and just the subtle crypto API to generate keys? Or are you not generating them on the client?