5 ms·
Unfortunately they are. https://datatracker.ietf.org/doc/html/rfc7517 https://datatracker.ietf.org/doc/html/rfc7517
by lmz 2y ago
Unfortunately they are. https://datatracker.ietf.org/doc/html/rfc7517 https://datatracker.ietf.org/doc/html/rfc7517
- candiddevmike 2y agoJSON Web Keys include (optional) X.509-related properties but don't necessarily use X.509 for anything. X.509 isn't used in JWT signing or really with any part of a JWT.
- selfmodruntime 2y agoYou can deliver x5c certificates that need to have been signed by the same public key as the token signature.