Jan

Can my jwk object be something like

{alg": "HS256", "typ": "JWT",

"sub": "1234567890", "name": "John Doe", "iat": 1516239022,

“k" : "secret-key"}

Where k is the JWT secret key?


Sent from my iPhone

> On Sep 9, 2019, at 1:48 AM, Jan Høydahl <jan....@cominvent.com> wrote:
> 
> In your security.json, add a JWK matching your signing algorithm, using the 
> “jwk” JSON key.
> 
> Example:
> “jwk” : { "kty" : "oct", "kid" : "0afee142-a0af-4410-abcc-9f2d44ff45b5", 
> "alg" : "HS256", "k" : "FdFYFzERwC2uCBB46pZQi4GG85LujR8obt-KWRBICVQ" }
> 
> Of course you need to find a way to encode your particular secret in jwk 
> format, there should be plenty of tools available for that. If you intend to 
> use symmetric key in prod you have to configure solr so that security.json is 
> not readable for anyone but the admin!
> 
> Jan Høydahl
> 
>> 9. sep. 2019 kl. 05:46 skrev Tyrone <tyrone....@gmail.com>:
>> 
>> HS256

Reply via email to