search

auth0 / java-jwt

Java implementation of JSON Web Token (JWT)
MIT License
5.84k stars 921 forks source link

Add Support for the EdDSA Signatures #654

Closed dylanjrae closed 1 year ago

dylanjrae commented 1 year ago

Describe the problem you'd like to have solved

Requesting support for using Ed25519 keys for encoding/decoding JWT's. We can't find any Java JWT library that supports these signatures, see: https://jwt.io/libraries?language=Java

Describe the ideal solution

Integrated EdDSA support as with others such as RS256.

Alternatives and current work-arounds

Unaware of any alternative java jwt libaries that support EdDSA

Additional information, if any

Have seen a couple others requesting this feature, it is faster and uses shorter keys than other alternatives. Perhaps this resource could be of assistance?

jimmyjames commented 1 year ago

hey @dylanjrae, I'm not super familiar with Ed25519 on Java, but I think java support for it might be something added to Java 15+? If we were to support this algorithm, we'd need to do it in a way that doesn't require a Java runtime beyond 8, at least for v4, to ensure compatibility. If it's possible in a non-breaking way we can consider it, though it's not likely to be a high priority for us in the short term.

jimmyjames commented 1 year ago

This is something we'll consider adding support for in v5, when I imagine we'll require Java 17+ as a baseline requirement.