Validate Signature

[AnnaBilo]

User Story

1. As a user
2. I want to be able to validate a signature
3. So that I can confirm its validity

Acceptance Criteria

• validate the signature of a token, provided a public key
• Extract the algorithm used to sign the token
• Given a signature function and a token, the validity of a token is confirmed

[mindtheme]

The public keys of an identity provider are accessible over their jwks_uri

[mindtheme]

https://www.npmjs.com/package/jsonwebtoken (used by the customer)

[skriesch]

I have created our development branch for this task and have added the jsonwebtoken library.

[skriesch]

I look, that I can use jwt.verify for the verification: https://github.com/auth0/node-jsonwebtoken#jwtverifytoken-secretorpublickey-options-callback

[skriesch]

Philip has implemented and added the validation of the token (incl. the signature) last week with e32b465

@RumiAust Should we add an output of the validation into the frontend to complete this task? That would complete the acceptance criteria "the validity of a token is confirmed".

[RumiAust]

@skriesch I think in the front end we just need to show a confirmation message of signature validity.