【发布时间】:2021-12-29 12:33:08
【问题描述】:
"e": "AQAB" 在 JWKS - Json Web 密钥集中是什么意思
{
"keys": [
{
"kty": "RSA", #key type
"e": "AQAB", #Question - what does "e" mean or stand for. And what values can e take. What is AQAB here.
"use": "sig", #verify client assertion signature. This means what is the use of the key. Answer - to verify signature. Right?
"kid": "somebase64encodestring", #key id
"alg": "RS256", #key algoritham. Here it is RSA.
"n": "anotherbase64encodestring" #This is the actual public key base64 encoded.
}
]
}
【问题讨论】:
-
进一步到 Q - 当指定 alg 并且公钥存在时。不能从公钥中推断出
"e": "AQAB"。我想是的。那为什么要在 jwks.额外的好处或要求是什么。
标签: jwt jwk jose4j nimbus-jose-jwt