Open lrosenthol opened 4 years ago
Note that this method needs no support from JWS libraries, as applications can use this method by modifying the inputs and outputs of standard JWS libraries.
If you want to do this you simply need to split the resulting token on the dot and remove the middle part. Before verification you insert it back.
True, but I ended up doing it in a more efficient (at least to me) way. Changes are in my fork at https://github.com/lrosenthol/jws-jwt-cpp
Hello, I have also a question related to the library support for Flattened JWS JSON serialization format. In order to use the jwt API as is shown in rsa-verify.cpp example for signature validation, do I need first to parse the JSON and build the token (protected||'.'||payload||'.'||signature), or there is some API which is supporting directly the JWS JSON format? Thank you!
I have a use case where it I need to produce a JWT where the payload data shouldn't be included in the token itself, as described here in the spec.