WrenSecurity / wrensec-commons

Community fork of ForgeRock Commons, which contains common utility code used by multiple products originally developed by ForgeRock.
http://wrensecurity.org
0 stars 10 forks source link

Investigate possibility of using a library as JWT implementation #3

Open siepkes opened 6 years ago

siepkes commented 6 years ago

wrensec-commons Contains it's own JWT implementation (dating back from it's ForgeRock roots). However maintaining a well tested and documented JWT implementation is no small feat. In the future the JWT specification might even be extended forcing us to implement those new pieces.

The idea is that maintaining our own JWT implementation doesn't offer us an advantage over other IAM solutions. Therefor we should investigate if we can replace it with a well documented, maintained and tested JWT library and so off loading the maintenance burden.

Examples of Java JWT libraries are: