Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat(jans-auth-server): introduce key_ops for granular map of crypto service to rotation profile #3415

Closed
2 of 7 tasks
yuriyz opened this issue Dec 26, 2022 · 3 comments · Fixed by #3560, #3642 or #3745
Closed
2 of 7 tasks

feat(jans-auth-server): introduce key_ops for granular map of crypto service to rotation profile #3415

yuriyz opened this issue Dec 26, 2022 · 3 comments · Fixed by #3560, #3642 or #3745
Assignees
@yuriyz
Labels
comp-jans-auth-server Component affected by issue or PR kind-feature Issue or PR is a new feature request
Milestone
1.0.7

Comments

@yuriyz
Copy link
Contributor

yuriyz commented Dec 26, 2022 •
edited
Loading

Description

feat(jans-auth-server): introduce key_ops /purpose to jwk during generation and selection

  • Change name “id_token …” to “OpenID …”
  • Generate additional keys for SSA – this needs to be a non-expiring key. Or rotation should only happen manually.
  • Update SSA code to use this new key, not the OpenID key
  • add key_ops per Yuriy’s suggestion (https://www.rfc-editor.org/rfc/rfc7517#page-7)

Test cases and code coverage

  • Write unit test to cover added/changed code
  • Update integration tests to cover added/changed code

Document the changes

  • task for updating documentation
@yuriyz yuriyz added comp-jans-auth-server Component affected by issue or PR kind-feature Issue or PR is a new feature request labels Dec 26, 2022
@yuriyz yuriyz added this to the 1.0.6 milestone Dec 26, 2022
@yuriyz yuriyz self-assigned this Dec 26, 2022
@yuriyz yuriyz changed the title feat(jans-auth-server): introduce key_ops /purpose to jwk during generation and selection feat(jans-auth-server): introduce key_ops /purpose to jwk during generation and selection with separate non-expired SSA key Dec 26, 2022
yuriyz added a commit that referenced this issue Jan 9, 2023
@yuriyz
fix(jans-auth-server): corrected keys description "id_token <purpose>…
c3267f8 
…" -> "Connect <purpose>" #3415
@yuriyz yuriyz mentioned this issue Jan 9, 2023
Merged
yuriyz added a commit that referenced this issue Jan 9, 2023
@yuriyz
fix(jans-auth-server): corrected keys description "id_token <purpose>…
75f99bd 
…" -> "Connect <purpose>" #3415 (#3560)
@yuriyz
Copy link
Contributor Author

yuriyz commented Jan 9, 2023

Re-opening, only first part is done - corrected description of existing keys.

@yuriyz yuriyz reopened this Jan 9, 2023
@yuriyz
Copy link
Contributor Author

yuriyz commented Jan 9, 2023

cc @nynymike

@mo-auto mo-auto mentioned this issue Jan 9, 2023
Merged
@mo-auto3 mo-auto3 mentioned this issue Jan 9, 2023
Merged
@moabu moabu modified the milestones: 1.0.6, 1.0.7 Jan 9, 2023
@nynymike nynymike changed the title feat(jans-auth-server): introduce key_ops /purpose to jwk during generation and selection with separate non-expired SSA key feat(jans-auth-server): introduce key_ops to map services to rotation profiles Jan 9, 2023
@nynymike nynymike changed the title feat(jans-auth-server): introduce key_ops to map services to rotation profiles feat(jans-auth-server): introduce key_ops for granular map of crypto service to rotation profiles Jan 9, 2023
@nynymike nynymike changed the title feat(jans-auth-server): introduce key_ops for granular map of crypto service to rotation profiles feat(jans-auth-server): introduce key_ops for granular map of crypto service to rotation profile Jan 9, 2023
yuriyz added a commit that referenced this issue Jan 18, 2023
@yuriyz
feat(jans-auth-server): introduced key_ops for granular map of crypto…
0fd696e 
… service to rotation profile #3415
@yuriyz yuriyz mentioned this issue Jan 18, 2023
Merged
3 tasks
yuriyz added a commit that referenced this issue Jan 27, 2023
@yuriyz
fix(jans-auth-server): fixed key rotation and added test to key gener…
f3fb562 
…ator context #3415
@yuriyz
Copy link
Contributor Author

yuriyz commented Jan 31, 2023

Key generation sample command:

/opt/jre/bin/java -Dlog4j.defaultInitOverride=true -cp /opt/dist/jans/jans-auth-client-jar-with-dependencies.jar io.jans.as.client.util.KeyGenerator -keystore /etc/certs/jans-auth-keys.p12 -keypasswd <Password> -sig_keys RS256 RS384 RS512 ES256 ES256K ES384 ES512 PS256 PS384 PS512 EdDSA -enc_keys RSA1_5 RSA-OAEP  -key_ops ALL -dnname "CN=jansAuth CA Certificates" -expiration 2 > /etc/certs/jans-auth-keys.json

Note new -key_ops ALL parameter which sets purpose of the keys generated by key generator.
Possible values are:

  • "connect" - connect keys (that is what we already have)
  • "ssa" - ssa keys which has expiration set to 50 years
  • "all" - generate both "connect" and "ssa" keys. Usually should be done during initial setup.

image

Sample JWKS:

{
  "keys" : [ {
    "descr" : "Signature Key: RSA RSASSA-PKCS1-v1_5 using SHA-256",
    "kty" : "RSA",
    "e" : "AQAB",
    "use" : "sig",
    "kid" : "connect_ea6bc554-dc1e-4ac4-a90c-1f23312a5b4f_sig_rs256",
    "x5c" : [ "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" ],
    "name" : "Connect RS256 Sign Key",
    "key_ops" : "connect",
    "exp" : 1675355593025,
    "alg" : "RS256",
    "n" : "wuABrNgLkVNkkc0wVYozDOOVKfm74kKBPTlheMkY0NE-3b_-QM_hSaYMfS2jmYWwsV11Jcsiruobqm99pUkvqbOpFvMaNhTkMqyk3_twB5Zqqj4dXkRRqFziAysr3tQh0DDxXziVvI_AUxHXWkrXn_sg3Lf9xtSZE_i4fAeOm5iBnx3OBOP7AV4RCl0LSG0IDVA1hREw1-rG_R4hP0f7eUmPXs0ZZY30hajA6Q-Qpoz2L7vyDaMZLmK8RS0SfmyQKTbJbXxe_zfVhqiqbHUVcrK05atmP_DauakgAfIroppXMJtBZOCf5-vydQAurYkmxvj1o-FnRKvPBedLrMd5yQ"
  }, {
    "descr" : "Signature Key: RSA RSASSA-PKCS1-v1_5 using SHA-384",
    "kty" : "RSA",
    "e" : "AQAB",
    "use" : "sig",
    "kid" : "connect_1b489b49-274f-4c11-9ee3-6b5ed2c67923_sig_rs384",
    "x5c" : [ "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" ],
    "name" : "Connect RS384 Sign Key",
    "key_ops" : "connect",
    "exp" : 1675355593025,
    "alg" : "RS384",
    "n" : "zIWpHdwiz3rlJLEeFHTMYAuaWZpVKxSPi8yN4g7B0YRhs5tzurz1MtRcRHf6pBHrM2aK8UnFO8oynug1Q3sJPXu4oDiR_Z_eyS17F-LHi0tZg547bngZRwGqOm-1gMndPq1nJw5-uAsIeqRPYr9_pfGj-kXtXum39wE7dXbo0vGXfDQ89wCoKAUD4YMZ55FYUGNvVTcQC92VcXFasJC9HXnXYr1ystOkdCfPrnF4ZlVfWCphF0HaQirC0Qh79QLg9lOGepqgXaZTZB43Yrcco0X3roczLAm4ADrYCgngj3R-PQMyQO0NCqEhf5GBfvjm4ztXGZpNWtdJVPLgwvFk_Q"
  }, {
    "descr" : "Signature Key: RSA RSASSA-PKCS1-v1_5 using SHA-512",
    "kty" : "RSA",
    "e" : "AQAB",
    "use" : "sig",
    "kid" : "connect_4d9403e1-f7a9-4d5b-9c5c-de0c644ce9ba_sig_rs512",
    "x5c" : [ "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" ],
    "name" : "Connect RS512 Sign Key",
    "key_ops" : "connect",
    "exp" : 1675355593025,
    "alg" : "RS512",
    "n" : "uCJPNUh7y1CuGjksR_lk1cDMhWpDFFTewdGnhTfeb_khcBnb5ZmWRFO9kk0jZ0s62iJNteCFDsVbRI6_pVRpJHvlqw6Tgrtfp-FScWV7c-e89UClOx4kk-2W4EjSitpCnY25QunDeKMAIgNSEJ1CVsnThwt-NxKCr7hFiyfKeQwLg84ks-Q1do2G29Jhb5S0AdDNyHD-zzTmGsoCjKPRsMyGBpOBMqxnElHBTEbwVaMzaA6iO6Dqc8sXOlg0NTrsKE5k313pSxC-Ais7M-CMoJoQ2KhtAXzUx9eHlMdvUy6PR8_139sGXpU3NLljUpBGTu5WrEvO-1AIawtRpv9y8Q"
  }, {
    "descr" : "Signature Key: ECDSA using P-256 (secp256r1) and SHA-256",
    "kty" : "EC",
    "use" : "sig",
    "crv" : "P-256",
    "kid" : "connect_03283227-1a1a-4f7f-a5db-8a242f66eff7_sig_es256",
    "x5c" : [ "MIIBezCCASGgAwIBAgIgOsqOIupXxYDF5Xn3fyQlpW29+P7N6POlg9h4UIHHSvYwCgYIKoZIzj0EAwIwIzEhMB8GA1UEAwwYamFuc0F1dGggQ0EgQ2VydGlmaWNhdGVzMB4XDTIzMDEzMTE2MzMwN1oXDTIzMDIwMjE2MzMxM1owIzEhMB8GA1UEAwwYamFuc0F1dGggQ0EgQ2VydGlmaWNhdGVzMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEhztgMuMQ1s1xAEA577TNTVPWCo/zqUYpylm3diy43/cG1+GDdnhak7l37JHuLiIsp/d3UXVZoE2GW8oU1bUqEaMnMCUwIwYDVR0lBBwwGgYIKwYBBQUHAwEGCCsGAQUFBwMCBgRVHSUAMAoGCCqGSM49BAMCA0gAMEUCIC14A/NtNd/nBis+gxHznCvtQFm0XUW13tYVGt6IzdQIAiEAimziG0bCChM+xNdRm257lPDFreuWGR27c0KMyA3uiB0=" ],
    "name" : "Connect ES256 Sign Key",
    "key_ops" : "connect",
    "x" : "hztgMuMQ1s1xAEA577TNTVPWCo_zqUYpylm3diy43_c",
    "y" : "Btfhg3Z4WpO5d-yR7i4iLKf3d1F1WaBNhlvKFNW1KhE",
    "exp" : 1675355593025,
    "alg" : "ES256"
  }, {
    "descr" : "Signature Key: ECDSA using P-384 (secp384r1) and SHA-384",
    "kty" : "EC",
    "use" : "sig",
    "crv" : "P-384",
    "kid" : "connect_fddc49d0-8724-46ca-89de-41f8b0195140_sig_es384",
    "x5c" : [ "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" ],
    "name" : "Connect ES384 Sign Key",
    "key_ops" : "connect",
    "x" : "W-4CviUm2ttgBrY5IVaGYURRn8pSILxGrnbdv2S7gIYhpzWlIVlk2sKCorEemY7a",
    "y" : "xkk7CsH5N_yX8tSUXu8Oe_dueBajCYXSM5l9j0cSKYsF0ylnxpwnkzTrxSebuRjN",
    "exp" : 1675355593025,
    "alg" : "ES384"
  }, {
    "descr" : "Signature Key: ECDSA using P-521 (secp521r1) and SHA-512",
    "kty" : "EC",
    "use" : "sig",
    "crv" : "P-521",
    "kid" : "connect_627929f4-d0bf-4e2d-812c-03d7370f7b6e_sig_es512",
    "x5c" : [ "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" ],
    "name" : "Connect ES512 Sign Key",
    "key_ops" : "connect",
    "x" : "IBDTLIsZaM61db8UvOZ7h643mNaBaz2_e7XZsK8s_uzGc72Ndxp12XCkBcxruc4KYr_dKZarLefWZZRgAOPoHB0",
    "y" : "AZJJ3iKpcXvltPQf3Se6YuP5COOeN2FbEBIsFpyqnMla60NmyO2eIFTN0RG_qVB2gGaDzbFw_m_jiC5FS-qcPhrF",
    "exp" : 1675355593025,
    "alg" : "ES512"
  }, {
    "descr" : "Signature Key: RSASSA-PSS using SHA-256 and MGF1 with SHA-256",
    "kty" : "RSA",
    "e" : "AQAB",
    "use" : "sig",
    "kid" : "connect_48e010bc-8fa3-43ef-874c-76ac9799f066_sig_ps256",
    "x5c" : [ "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" ],
    "name" : "Connect PS256 Sign Key",
    "key_ops" : "connect",
    "exp" : 1675355593025,
    "alg" : "PS256",
    "n" : "sAfupc1an8bupiIljnRmg_-MOyH5Cwmhob2aThvStDTWOC0mqmCcl89hFH7ZVA8VqeAKW12AfVjJVPiT15FpblbWNJVuQOPS8XbK08AvNSsZQ28dt-VqN1lF16aGAVxpUMfYafgyS_fBf65Xp-_UBGXWpc3kcuiV9t4WEfXzZ7bAcWis8Q5R__FnoHrP-zqQ8WBRQ7Q8t-OAl_nc9MzS_e1v6tjye3R9mnl_dCCV8y_ow2e-HiRCJZbCxqvc6mjuEjo-Oo8-V7mRSPtQqV-DGoTQfspujOoYHNBKwLQqghpHUb32MqQfJYtgk4QppIJvJj1bnyN1_sBkuC4DKCvq1Q"
  }, {
    "descr" : "Signature Key: RSASSA-PSS using SHA-384 and MGF1 with SHA-384",
    "kty" : "RSA",
    "e" : "AQAB",
    "use" : "sig",
    "kid" : "connect_49328e0b-5254-4805-88f3-467e50a410ef_sig_ps384",
    "x5c" : [ "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" ],
    "name" : "Connect PS384 Sign Key",
    "key_ops" : "connect",
    "exp" : 1675355593025,
    "alg" : "PS384",
    "n" : "xRiyuy8Fk6OvR4Ut8Ra6kr-nshmko2tfBNITx_ygel0OT3ooa7Q62Gk6lhl29io5skaMrM6Ch7-pMym5f982ODGavJpCoiCH0iUO7fiaQQ47mqQXBj2CTl2S6e8mUSW22KMs7yvJx0pgacw2AY064UXocrz89CLSOX48X12v1GiLOwL-VpqPmwCYrkVp4LFcjjmcES39uMg3STpTL7VBQzbUHxRk2YTfyTkzlUN2UKaXkmS9S8UjiTn5uCw1cksZjGDXF8bOPE4YEhzkaEE062NFrOFKN-V4gAMliQezjxJ3elXA2VaVfRs8IswQHCkkeEUC-zXooHupamGF3hNsSQ"
  }, {
    "descr" : "Signature Key: RSASSA-PSS using SHA-512 and MGF1 with SHA-512",
    "kty" : "RSA",
    "e" : "AQAB",
    "use" : "sig",
    "kid" : "connect_9ae6a824-e7a3-485a-9c92-ed4cee3658ed_sig_ps512",
    "x5c" : [ "MIIDbzCCAiOgAwIBAgIgA+TjeDIma9fBdMe5EHUmS4BMvnwvF/aFt+ANa9sALtcwQQYJKoZIhvcNAQEKMDSgDzANBglghkgBZQMEAgMFAKEcMBoGCSqGSIb3DQEBCDANBglghkgBZQMEAgMFAKIDAgFAMCMxITAfBgNVBAMMGGphbnNBdXRoIENBIENlcnRpZmljYXRlczAeFw0yMzAxMzExNjMzMDlaFw0yMzAyMDIxNjMzMTNaMCMxITAfBgNVBAMMGGphbnNBdXRoIENBIENlcnRpZmljYXRlczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJIKCzOzXLtg6T8djYMQQoS8cusawADyE/doj56i/85P+7M8IaIZWIkUr1QCQ/ZspHUqUgIfYSlOvrf8D6b6AJvvIlvY/rgCyJPQENXVIRbYFo6UZPUL3GcCCoVd+opk79DS4Dq9zwASjq+dRy8HZi2gs9LCL2L3qAhNMaVR/eKU88GBVA6bfRZTuPP++06OS7xxJo96wRCSaOoie9CdsNX4Wpe8nWKAtPRCd4JaBsFnPaWibYyPgFSmWUk+vpWXoaNSaZoBlLFz+QWbD6Xv5PPqT7JMPLxB+MYiN2X74jNFFZTuIDE6l6cQ4BSwy5kh1QZW7rOZz7sgOSIDOsWEMcCAwEAAaMnMCUwIwYDVR0lBBwwGgYIKwYBBQUHAwEGCCsGAQUFBwMCBgRVHSUAMEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAIDBQChHDAaBgkqhkiG9w0BAQgwDQYJYIZIAWUDBAIDBQCiAwIBQAOCAQEABFrlPHUm7wJF2/M+HWAexFX5jTyn5dwMrwQQHdgcVpUcIYwcLGauWFB/dxh+FWM42VYUocTwuG+CTcaipRKh9yKRbh/BdSJn5VvpfheIxpOMYXkB/ngwZfofgQfGshM7DaIUTHUSViT5I9omb6uvJhbZLJv6+wIJH01s+PrQNDlyamz5UnfVkKj40Po9KhJ8mx9sjLzyG1OUWedlQOAHhhAE1WNO+y0lkslyIU6G3ygRmvdYwqVIyzdSXh/8vajsEbO27MLfMc1zCxSobldVjYhIZfNgIblIb9UZ3DcClerkqD86gp67jcTR586lePqI2CpRLK2QPKUdMdpPEGZc2g==" ],
    "name" : "Connect PS512 Sign Key",
    "key_ops" : "connect",
    "exp" : 1675355593025,
    "alg" : "PS512",
    "n" : "skgoLM7Ncu2DpPx2NgxBChLxy6xrAAPIT92iPnqL_zk_7szwhohlYiRSvVAJD9mykdSpSAh9hKU6-t_wPpvoAm-8iW9j-uALIk9AQ1dUhFtgWjpRk9QvcZwIKhV36imTv0NLgOr3PABKOr51HLwdmLaCz0sIvYveoCE0xpVH94pTzwYFUDpt9FlO48_77To5LvHEmj3rBEJJo6iJ70J2w1fhal7ydYoC09EJ3gloGwWc9paJtjI-AVKZZST6-lZeho1JpmgGUsXP5BZsPpe_k8-pPskw8vEH4xiI3ZfviM0UVlO4gMTqXpxDgFLDLmSHVBlbus5nPuyA5IgM6xYQxw"
  }, {
    "descr" : "Signature Key: RSA RSASSA-PKCS1-v1_5 using SHA-256",
    "kty" : "RSA",
    "e" : "AQAB",
    "use" : "sig",
    "kid" : "ssa_535b1efa-ec48-496a-975e-57efa8656686_sig_rs256",
    "x5c" : [ "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" ],
    "name" : "Connect RS256 Sign Key",
    "key_ops" : "ssa",
    "exp" : 3253105999446,
    "alg" : "RS256",
    "n" : "jxoObaJKjUp0FRkh4OQpL3jy5kZISmEf0rddRD16WdInNmEDSr4WZ5dfcLjrrxBX6Emkz9tIaTuk7fv8Uiu_MK5-0jDF4TFYcFAtH3R8cSKrukvuGwj0zrIJzZ5hat-BUTprLlUGh5Je4eL2659uBr4uJ-1kOHIZi5DyXDIy_BmP5obmPYR_nEotsAQeXHdPCar-fSOP-Dc644tOqkZh0F7fcVPJhCtjkpp4yVzP0jMQafKMOVMr5e2_SdcJHoG06-xkNVqPKd40ri3lTOGksHEP_MAsBuFo8LAK6ZWoXd06_JARX7-IcDt3j8K05JRvDLhCThENmgMJzUG3BA-dYw"
  }, {
    "descr" : "Signature Key: RSA RSASSA-PKCS1-v1_5 using SHA-384",
    "kty" : "RSA",
    "e" : "AQAB",
    "use" : "sig",
    "kid" : "ssa_97749a06-8331-4a11-975e-aa4a915a6975_sig_rs384",
    "x5c" : [ "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" ],
    "name" : "Connect RS384 Sign Key",
    "key_ops" : "ssa",
    "exp" : 3253105999890,
    "alg" : "RS384",
    "n" : "uzrYAUwyXbsgqw6XT9S4gUFqsBX7WBLcHVLr8cTx8dS5nW6ChrnTIbDPtga5u2DObbbCANZj73qchmErPLSj9Do38x1BMwVKimiMVoUgCeUHGFDgwhm2v07lm_UcBDXH20xIgKMBFbDvgc4zpMILQF-A4_rp_dHxyqLecgDFLcuEw_kchMjVe74oN4MyOWsoqSjuh7TYdwnfJuqlIiVLryfOCHrfPMoIK5imXEWyUDyw99CC9GNeTLYIVXouRh4gNr5bskNVOfIKH5WsSek1mOtu88EdJmJnPfxeX6fjj4ctHMhmUdI6fgnmcSIZ1ZD7IHjjuBqO3tWDq1o8bHDI7w"
  }, {
    "descr" : "Signature Key: RSA RSASSA-PKCS1-v1_5 using SHA-512",
    "kty" : "RSA",
    "e" : "AQAB",
    "use" : "sig",
    "kid" : "ssa_83822939-5563-46e8-8c3e-6aa0c7cf4d30_sig_rs512",
    "x5c" : [ "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" ],
    "name" : "Connect RS512 Sign Key",
    "key_ops" : "ssa",
    "exp" : 3253106000959,
    "alg" : "RS512",
    "n" : "yVOO9NWKl3rT4eOMS0qjel900ffYdo0lFjxGUroa_qwvaD21kaoIouvMjulFIN383B7KlrnlTogFbYrjSfpM183KpZHdkD4oW8bsN4LiYGU439ykqZZB1C8miob_dCVdEUUSc7a527qcItLC9Hq7jW7QmQqgOmsG9Z3ojzcjmmUnDgJhgm0T1z_h3HNtBplWQtLMjt0SNWst6u6ONS3I7OGjxfftZupt-jbnZ0e3fRnBRPLKOJ8fmhI9SfIdhI95LWlasl77Zpc6y6bj5NEW9A9B8WHTG6QIpOYn8anvsUcsgENpg22eJhiVNLo4CruZLOQdnHKEBiCcdF9V08Bb7Q"
  }, {
    "descr" : "Signature Key: ECDSA using P-256 (secp256r1) and SHA-256",
    "kty" : "EC",
    "use" : "sig",
    "crv" : "P-256",
    "kid" : "ssa_ccf4eef7-2196-477e-8004-f213629afe93_sig_es256",
    "x5c" : [ "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" ],
    "name" : "Connect ES256 Sign Key",
    "key_ops" : "ssa",
    "x" : "SMG97Eai7JiYfUcIoyhwSKL-kFZD0k5I47lzt0oK_i0",
    "y" : "-HeT5Xn539wpNK5x4cxHJHNDmypKrhXN-MmDt-orm-E",
    "exp" : 3253106001605,
    "alg" : "ES256"
  }, {
    "descr" : "Signature Key: ECDSA using P-384 (secp384r1) and SHA-384",
    "kty" : "EC",
    "use" : "sig",
    "crv" : "P-384",
    "kid" : "ssa_68a50aad-09cb-41e3-9170-816cdec63383_sig_es384",
    "x5c" : [ "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" ],
    "name" : "Connect ES384 Sign Key",
    "key_ops" : "ssa",
    "x" : "2e75OGw35833E0N9Ep_7gbgp3PjGKWMzDoHI9eSu7ISFH4TLBO05rvXDYW0mVmlV",
    "y" : "xW25oEdtiaU8Jm-gLt6CxyLuizhsH1SoFxV1SdxSo9E5rh_8vBCsDUj7O9VPQ0FM",
    "exp" : 3253106001748,
    "alg" : "ES384"
  }, {
    "descr" : "Signature Key: ECDSA using P-521 (secp521r1) and SHA-512",
    "kty" : "EC",
    "use" : "sig",
    "crv" : "P-521",
    "kid" : "ssa_73c8c1bc-a2a6-430f-a560-a59be2905359_sig_es512",
    "x5c" : [ "MIICBTCCAWagAwIBAgIgIyacRBqH6+y2tIWa3YGzIGO/vVqKjYExn8/l1n2hb0gwCgYIKoZIzj0EAwQwIzEhMB8GA1UEAwwYamFuc0F1dGggQ0EgQ2VydGlmaWNhdGVzMCAXDTIzMDEzMTE2MzMxMVoYDzIwNzMwMTMxMTYzMzIxWjAjMSEwHwYDVQQDDBhqYW5zQXV0aCBDQSBDZXJ0aWZpY2F0ZXMwgZswEAYHKoZIzj0CAQYFK4EEACMDgYYABAHT5dGF/aDQPkPRmz/ngLKP6TyTdRjQbphyikQJKqVHGveyrNuggZM6kkXZcn7scoz5t907y42Sa0Olz/Eo5R96/wH+epK/NAgqo3Z+A0RhHsasukQZPc+9hpTSng2CJJSJkxcx/wCEzs1moL7gXzqMwpoz1RUY19vbThyaBR8IxBQ9rqMnMCUwIwYDVR0lBBwwGgYIKwYBBQUHAwEGCCsGAQUFBwMCBgRVHSUAMAoGCCqGSM49BAMEA4GMADCBiAJCAXYq2QTx86OiKiemi7jKPOe4MO/y6upLE/Fp89WPBn5nwP2vMQrUlwK46KM8dCjARwB1/Vu77k8wSK68XS/yCgoGAkIAm1Xnv5gxUt0/KYDyTg3qCj1IQAb1vDd7o9G+0k2Fe5ABxKiWPvl3ZjWu4Fd3EJ+R32tislfCp2/R1TdDFMnHAv4=" ],
    "name" : "Connect ES512 Sign Key",
    "key_ops" : "ssa",
    "x" : "AdPl0YX9oNA-Q9GbP-eAso_pPJN1GNBumHKKRAkqpUca97Ks26CBkzqSRdlyfuxyjPm33TvLjZJrQ6XP8SjlH3r_",
    "y" : "Af56kr80CCqjdn4DRGEexqy6RBk9z72GlNKeDYIklImTFzH_AITOzWagvuBfOozCmjPVFRjX29tOHJoFHwjEFD2u",
    "exp" : 3253106001890,
    "alg" : "ES512"
  }, {
    "descr" : "Signature Key: RSASSA-PSS using SHA-256 and MGF1 with SHA-256",
    "kty" : "RSA",
    "e" : "AQAB",
    "use" : "sig",
    "kid" : "ssa_3aac7c03-bece-4bbe-a89a-cbc5837670eb_sig_ps256",
    "x5c" : [ "MIIDcTCCAiWgAwIBAgIgdFxe5Hl7nX0hW/t/En3bj26xr3Sf5zLK66OajcnyPnEwQQYJKoZIhvcNAQEKMDSgDzANBglghkgBZQMEAgEFAKEcMBoGCSqGSIb3DQEBCDANBglghkgBZQMEAgEFAKIDAgEgMCMxITAfBgNVBAMMGGphbnNBdXRoIENBIENlcnRpZmljYXRlczAgFw0yMzAxMzExNjMzMTJaGA8yMDczMDEzMTE2MzMyMlowIzEhMB8GA1UEAwwYamFuc0F1dGggQ0EgQ2VydGlmaWNhdGVzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tWaDbGi4S7j5SNtWqv3OgRmBZJEyEmc6ZPKEmKhEelJ8HbGWmC4GoVnIYZEJoiY5gHLvQdEjkdhljM0IQjzRCKeeAdb6cb7hgkvh5DzGTnm8PHAthMzfzh7gkjhVLkzlSoCBVKcFXlCXryQngX7BZ9Kf1UCLKGfa+Ap0wjV4c69DRMFx3xxQSBY6Pkh6feOTHMBbrsoVPMvKKdAm0VgW90yNCkmlkEEpaqvEIsp+h8Avm13bsv0vJp781O3AtVTa0a44KxWfy/TCVSOpKXCf4BcODlanQRnGI+66eGcwwuADsJP93ZeIevRNwrBiJuMUIyEw1z5RVg3cLY7sHQdrwIDAQABoycwJTAjBgNVHSUEHDAaBggrBgEFBQcDAQYIKwYBBQUHAwIGBFUdJQAwQQYJKoZIhvcNAQEKMDSgDzANBglghkgBZQMEAgEFAKEcMBoGCSqGSIb3DQEBCDANBglghkgBZQMEAgEFAKIDAgEgA4IBAQAqhR9ItIKEuteBTEewBsYOsEUB0E7nyepbEpLtUQdRXNbekGYGOv03w7c19+luZICWquHEUxLk+NYvJPKP4ynI3wERaM0mV0Yo1SVm4nYV//RtRXJV0ACM2JUF53qcJDItAFhq8suw3xCnri7E6TS+e8ZbJmFWfB7wPpJkAixwk3e8nMdYzj/CmndNSxpePimgUtd68ZVjY7gsSks9hO1So2cADFtWG2AvySNvt4onfzuzxnzpfUpHsYJAw0+KEcKMnPbwGW5fEh/73DdjcRKKTNE3yccb+8z9XBj82ssC9MzPD92Q5Fw02nfbGPL85n8Ep+KtS2keEplhwa6NPedp" ],
    "name" : "Connect PS256 Sign Key",
    "key_ops" : "ssa",
    "exp" : 3253106002036,
    "alg" : "PS256",
    "n" : "1tWaDbGi4S7j5SNtWqv3OgRmBZJEyEmc6ZPKEmKhEelJ8HbGWmC4GoVnIYZEJoiY5gHLvQdEjkdhljM0IQjzRCKeeAdb6cb7hgkvh5DzGTnm8PHAthMzfzh7gkjhVLkzlSoCBVKcFXlCXryQngX7BZ9Kf1UCLKGfa-Ap0wjV4c69DRMFx3xxQSBY6Pkh6feOTHMBbrsoVPMvKKdAm0VgW90yNCkmlkEEpaqvEIsp-h8Avm13bsv0vJp781O3AtVTa0a44KxWfy_TCVSOpKXCf4BcODlanQRnGI-66eGcwwuADsJP93ZeIevRNwrBiJuMUIyEw1z5RVg3cLY7sHQdrw"
  }, {
    "descr" : "Signature Key: RSASSA-PSS using SHA-384 and MGF1 with SHA-384",
    "kty" : "RSA",
    "e" : "AQAB",
    "use" : "sig",
    "kid" : "ssa_7a19db12-73e2-4535-b649-9f754f3ad6b9_sig_ps384",
    "x5c" : [ "MIIDcTCCAiWgAwIBAgIgRgigE9uTP/EpZCTODy2rwScjeKnTdAaBxY8okas49k8wQQYJKoZIhvcNAQEKMDSgDzANBglghkgBZQMEAgIFAKEcMBoGCSqGSIb3DQEBCDANBglghkgBZQMEAgIFAKIDAgEwMCMxITAfBgNVBAMMGGphbnNBdXRoIENBIENlcnRpZmljYXRlczAgFw0yMzAxMzExNjMzMTJaGA8yMDczMDEzMTE2MzMyMlowIzEhMB8GA1UEAwwYamFuc0F1dGggQ0EgQ2VydGlmaWNhdGVzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKjojUduCoACr9F51jq6T0fZLEo6jdmCYGteMdNM33BmMHFCrRgrrxAeka+qVrXh1pjq1menzlWMFilxV25EzdF6qVl6kUSKYgu7ex2LeSYCdjkIAujrGQ5qVjeQWfk/iwmcPzHjlhQOMB0LOh7CPTD8sBt/thZh4mGKk07ubNS07D6COXWDCAyPi1rA5hMGNRdZIJ8yLbhpQpv4krnIeGbVL4+K8JUkgKIVatLz/qbz4WHuu0lK8fmiEAvVHS202DraI/UARLI0tcABmd9Pj4Ud5jRDYtX4NrN14owkQlIfeMWqpAs/Kdpfxb7/zsI3VYen+3Qsszry+cSihIaIfwIDAQABoycwJTAjBgNVHSUEHDAaBggrBgEFBQcDAQYIKwYBBQUHAwIGBFUdJQAwQQYJKoZIhvcNAQEKMDSgDzANBglghkgBZQMEAgIFAKEcMBoGCSqGSIb3DQEBCDANBglghkgBZQMEAgIFAKIDAgEwA4IBAQBGh7zOoWuOlz3881jv8Si51QIDCRASmgMIT0Ae2G9gLvw76SzKwhXSN63Rwb1iJG0Ew6brwntTlwUC+lpr9dxZONDOi6eMmsc9wLo9QwwBctrB5O3egAznoQV6HXmCAO8FQsFEIzJuZZ66WBUJfnEQLB0czEmtPgmWGRYJmXwaD4OGAp0e/GrWL5suUgZ64KY9+I+8dJHJJ0ae2jfrpm0xf/sWJXNGbZZzJNHJHTERYO8y3fsVFFrRxdEG7nkVlapPN7mzJOZU5xe+iGFnenDSRuM2A+Ctf6BQQATlogy3V50YtL84I6QAgTY/sn4eKSp+cfpeAyvbCNhRs6MnDv7O" ],
    "name" : "Connect PS384 Sign Key",
    "key_ops" : "ssa",
    "exp" : 3253106002522,
    "alg" : "PS384",
    "n" : "vKjojUduCoACr9F51jq6T0fZLEo6jdmCYGteMdNM33BmMHFCrRgrrxAeka-qVrXh1pjq1menzlWMFilxV25EzdF6qVl6kUSKYgu7ex2LeSYCdjkIAujrGQ5qVjeQWfk_iwmcPzHjlhQOMB0LOh7CPTD8sBt_thZh4mGKk07ubNS07D6COXWDCAyPi1rA5hMGNRdZIJ8yLbhpQpv4krnIeGbVL4-K8JUkgKIVatLz_qbz4WHuu0lK8fmiEAvVHS202DraI_UARLI0tcABmd9Pj4Ud5jRDYtX4NrN14owkQlIfeMWqpAs_Kdpfxb7_zsI3VYen-3Qsszry-cSihIaIfw"
  }, {
    "descr" : "Signature Key: RSASSA-PSS using SHA-512 and MGF1 with SHA-512",
    "kty" : "RSA",
    "e" : "AQAB",
    "use" : "sig",
    "kid" : "ssa_2f4cd37c-1e58-445b-a43d-6c5483602ca9_sig_ps512",
    "x5c" : [ "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" ],
    "name" : "Connect PS512 Sign Key",
    "key_ops" : "ssa",
    "exp" : 3253106002784,
    "alg" : "PS512",
    "n" : "mGmlWzpLHKoL7-ctekn6Uw_wk_4nhUPLcv_Z4zaK_pPr1H4OPWdUYbTcORuMqIf88_R-tBIRMVtbkPlYZLq7pAxKOJt6AR0eikIsILOr9hgrTwZQeKIGqt_qKnfml9R2m270LNHGGPyVZArUY7jKILkizzrLuG4ispw_2rH6XID2IN5o-Xat9Be8wJDlo9rfZdELjwQwaNruAC6Rctng1-FtMUP-_QOGYmr6yqRGxwGVtV1bT-AT3mkolGnXovMeUQ7yH8gKllT1EAi5RKrvw75IDPdS4wqJwDMeLgygZ9QNM_Wl3uYUYLGwvmXRJaf25c6b_WdEZMnVKhKK8fzlSw"
  }, {
    "descr" : "Encryption Key: RSAES-PKCS1-v1_5",
    "kty" : "RSA",
    "e" : "AQAB",
    "use" : "enc",
    "kid" : "connect_9c733a0c-3dbd-4b9a-b93a-ec41eb491d1d_enc_rsa1_5",
    "x5c" : [ "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" ],
    "name" : "Connect RSA1_5 Encryption Key",
    "key_ops" : "connect",
    "exp" : 1675355593025,
    "alg" : "RSA1_5",
    "n" : "u_2UHRi67GgOnJt3wNe-6SSWeBpvL0A3a773nQqfVyje659ry3wBp6Q1AE2nVy_BTvbUDXZw4MXYYilb6Pe8HT5h2mk1TZ8nb0x5fgVCo9GTHAZsM79KGDaKC0meUhBFMBBFkXsUIEHPG03Ku17HCqbi7Klb6SMqB81PVA_71aLTcmyf1yYbsghbLE3K0ErQukKGlQRFaEhN75z13BLmVZDHdW6_GRE1Ye55n5GXIC5-Fs04MnDODte5JyBSWrKRlHD7Xe_sREhArhyiP5xTyqAAIQRawQLmTP6umTsGdrjezyS-73CkxVBfPVdEicujpvAi2qe9baIEP4jm_Y82DQ"
  }, {
    "descr" : "Encryption Key: RSAES OAEP using default parameters",
    "kty" : "RSA",
    "e" : "AQAB",
    "use" : "enc",
    "kid" : "connect_50b8d917-e91b-4637-92c7-d2aaa8f871bb_enc_rsa-oaep",
    "x5c" : [ "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" ],
    "name" : "Connect RSA-OAEP Encryption Key",
    "key_ops" : "connect",
    "exp" : 1675355593025,
    "alg" : "RSA-OAEP",
    "n" : "3ePNwUdp-L9D2YZUloKXtb2SiYoyYOUuJ4zeFldffkV8S9KXk6vRN_6D5el2EZCsUlStzAFIJdOjC-Iw3fMF20yQpxoNiorojIKj_OfUBmo0IcH6D5a4FaQt6xGh_m9DzGkAMXoE1YRfCmUG3V9U-jbIZwsJTrNnviDH6LGXj0nTHORJGgK8U8MIJ5d8-83DRr09lz-AVzFjxRQNjJH_hdK622snLIC_xUUQyvRF60FJB_hFtCCurGw0gfE_9gdGdcDNJuZHNNMoXqoM74tXTcfRZeuoIvBqA2Sv_XHbsBf8TRpg5DxRUdFnO8kot3Rms4TLN8Joh1VMBDbiLuxsfw"
  }, {
    "descr" : "Encryption Key: RSAES-PKCS1-v1_5",
    "kty" : "RSA",
    "e" : "AQAB",
    "use" : "enc",
    "kid" : "ssa_c7813972-e38e-46c8-8eab-2b7be61f47ce_enc_rsa1_5",
    "x5c" : [ "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" ],
    "name" : "Connect RSA1_5 Encryption Key",
    "key_ops" : "ssa",
    "exp" : 3253106004842,
    "alg" : "RSA1_5",
    "n" : "yKaeGkEz6vg1V2uTb9U6bZqYruYK_-PQ38NKvXHS2DwNL7RH7BFGOgy0PIVkAQ2MVxBeLKWRZur1PCN_Acdg0w6QqtKL01Mm7BOx6zKRyiKS_a1hJ35r6TxGTBzfGiN18ShtcAggwOcOfY2GCrStHFndyg_ps4O0o0m14NThk5BlrBAKbmgVOkNaP_OQBxymE5jl0grO-eoBw-XpvynQ8qcuOX2CwpbKuONzUapXsS24dadtdMHm4ilnQjMU7gOmTSKQZza2IIcODB71WxWoj6bcLFkPHt2Hay4oWAoVWWersRilWiyfW9ijSqJR0e83QgIRRymTEcSm4DVRHEWBuQ"
  }, {
    "descr" : "Encryption Key: RSAES OAEP using default parameters",
    "kty" : "RSA",
    "e" : "AQAB",
    "use" : "enc",
    "kid" : "ssa_9b4d8bf9-25d3-4f26-8b1e-73a557fb8474_enc_rsa-oaep",
    "x5c" : [ "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" ],
    "name" : "Connect RSA-OAEP Encryption Key",
    "key_ops" : "ssa",
    "exp" : 3253106005372,
    "alg" : "RSA-OAEP",
    "n" : "hGuw1KpPe8_6MJpyzy2QyCGWB05ZwkvefoMv2aku7SUOPNPK23mbT7U-CeP2EMOePHb7ELQSLtIR4z1MEZpgOAKZZuWcDWzmTV_6Pjv-KDnfrFtJGRsbqyLaugm8qVZxLVFY0eOT3_M4LCiawXkcNzv_Ch5ZFbiPABL26jr3CiFq40qE40IwGv1BKTlhbMoweyef43-m354rSotbceVS6TY5XUpahh-DsQyKLdpe3_id3-WrJeyIXPCDZMFwtieCqfLNzzkn5pJ5dxqoXnXTsnYhXxRrApxiPZN4LoR8-k5IoUSzzlR18VRYAVXuOT8c_1y9CN8da95f3h0XGJOS5Q"
  } ]
}

yuriyz added a commit that referenced this issue Jan 31, 2023
@yuriyz
minor code improvements #3415
3e3b357
yuriyz added a commit that referenced this issue Jan 31, 2023
@yuriyz
feat(jans-auth-server): introduced key_ops for granular map of crypto…
58693c5 
… service to rotation profile #3415 (#3642)

* feat(jans-auth-server): introduced key_ops for granular map of crypto service to rotation profile #3415

* fix(jans-auth-server): fixed key rotation and added test to key generator context #3415

* minor code improvements #3415
@iromli iromli mentioned this issue Jan 31, 2023
Closed
This was referenced Jan 31, 2023
Closed
Merged
Closed
This was referenced Feb 6, 2023
Closed
Closed
@yuriyz yuriyz mentioned this issue Feb 13, 2023
Closed
@mo-auto3 mo-auto3 mentioned this issue Feb 22, 2023
Merged
@mo-auto mo-auto mentioned this issue Feb 22, 2023
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@yuriyz yuriyz

Labels
comp-jans-auth-server Component affected by issue or PR kind-feature Issue or PR is a new feature request
Projects
None yet
Milestone
1.0.7
2 participants
@yuriyz @moabu