Versions Compared

Old Version 8

changes.mady.by.user Sergey Beryozkin

Saved on

compared with

New Version 9

changes.mady.by.user Colm O hEigeartaigh

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

JOSE JAX-RS Filters

JWE

JWS

Configuration

...

Configuration that applies to both encryption and signature

rs.security.keystore.type

The keystore type. Suitable values are "jks" or "jwk".

rs.security.keystore.passwordThe password required to access the keystore.
rs.security.key.passwordThe password required to access the private key (in the keystore).
rs.security.keystore.alias The keystore alias corresponding to the key to use. You can append one of the following to this tag to get the alias for more specific operations:
     - jwe.out
     - jwe.in
     - jws.out
     - jws.in
rs.security.keystore.aliasesThe keystore aliases corresponding to the keys to use, when using the JSON serialization form. You can append one of the following to this tag to get the alias for more specific operations:
     - jws.out
     - jws.in
rs.security.keystore.fileThe path to the keystore file.
rs.security.key.password.providerA reference to a PrivateKeyPasswordProvider instance used to retrieve passwords to access keys.
rs.security.include.public.keyInclude the JWK public key (for signature or encryption) in the "jwk" header.
rs.security.include.certInclude the X.509 certificate (for signature or encryption) in the "x5c" header.
rs.security.include.key.idInclude the JWK key id (for signature or encryption) in the "kid" header.
rs.security.include.cert.sha1Include the X.509 certificate SHA-1 digest (for signature or encryption) in the "x5t" header.

Encrypting JWK stores

JAX-RS filters can read the keys from encrypted JWK stores. The stores are encrypted inline or in separate storages (files). By default the filters expect that the stores has been encrypted using

...