Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat: Change JWT signing algorithm from HS256 to RS256 #103

Open
xieydd opened this issue Dec 6, 2022 · 0 comments
Open

feat: Change JWT signing algorithm from HS256 to RS256 #103

xieydd opened this issue Dec 6, 2022 · 0 comments

Comments

@xieydd
Copy link
Member

xieydd commented Dec 6, 2022

Description

  • HS256 is a symmetric algorithm that shares one secret key between the identity provider and your application. The same key is used to sign a JWT and allow verification that signature.

  • RS256 algorithm is an asymmetric algorithm that uses a private key to sign a JWT and a public key to verification that signature.

  • RS256 is the recommended algorithm when signing your JWTs. It is more secure, and you can rotate keys quickly if they are compromised. (Auth0 signs JWTs with RS256 by default).

Message from the maintainers:

Love this enhancement proposal? Give it a 👍. We prioritise the proposals with the most 👍.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
No open projects
envd sprint board
Status: No status
Milestone
No milestone
Development

No branches or pull requests
1 participant
@xieydd