Use asymmetric keys for JWT

datacite / volpino

The DataCite Profiles service

https://profiles.datacite.org

MIT License

2 stars 0 forks source link

Closed mfenner closed 7 years ago

mfenner commented 7 years ago

Public keys are easier/safer to share.

RSA using SHA-256 hash algorithm (RS256) instead of HMAC using SHA-256 hash (HS256)
put private key in ENV variable
correctly handle private key and public key newlines, use .gsub('\n', "\n")
also change keys in crosscite/doi-metadata_search