Skip to content

Support HS256, HS384 and HS512 signatures in vault config #116

@overheadhunter

Description

@overheadhunter

While HS256 should remain the default signature when writing vault configs, HS384 and HS512 should be accepted when reading a vault config.

Currently, HS256 is hard coded and the algorithm header claim is ignored:

var verifier = JWT.require(Algorithm.HMAC256(rawKey)) //

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions