fixes #46 add kid to the JWT header when issuing JWT token

networknt · Apr 6, 2017 · b1635f4 · b1635f4
1 parent 65ecaaf
commit b1635f4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/security/src/main/java/com/networknt/security/JwtHelper.java b/security/src/main/java/com/networknt/security/JwtHelper.java
@@ -87,7 +87,7 @@ public static String getJwt(JwtClaims claims) throws JoseException {
 
         // Set the signature algorithm on the JWT/JWS that will integrity protect the claims
         jws.setAlgorithmHeaderValue(AlgorithmIdentifiers.RSA_USING_SHA256);
-
+        jws.setHeader(KID, jwtConfig.getKey().getKid());
         // Sign the JWS and produce the compact serialization, which will be the inner JWT/JWS
         // representation, which is a string consisting of three dot ('.') separated
         // base64url-encoded parts in the form Header.Payload.Signature