search

jasongoodwin / authentikat-jwt

JWT Scala Implementation - Claims based auth for Scala.
Apache License 2.0
133 stars 45 forks source link

Switch to bouncycastle provider to avoid stateful classes in objects. #21

Closed jasongoodwin closed 8 years ago

jasongoodwin commented 8 years ago

We have to be careful with handling jdk security classes so we end up making a bunch of extra objects to avoid thread safety issues. I think bouncycastle offers threadsafe alternatives - it would be worthwhile to change the signing and verification to use bouncycastle

jasongoodwin commented 8 years ago

I investigated this and bouncycastle's providers still hold state so unless I can see a good reason to use it I'll stick with the java libraries.