search

upb-uc4 / lagom-core

Repository for the micro service backend using lagom.
Apache License 2.0
6 stars 0 forks source link

Public and Private Key Signature #414

Open david-buderus opened 3 years ago

david-buderus commented 3 years ago

Is your feature request related to a problem? Please describe. It would be much cleaner to use a public key to check a signature, so we don't need to spread the private key to every service.

ldklenner commented 3 years ago

We can generate a Public-Private KeyPair using openssl. We then need to encode the public and private key so it can be read by Java. This is illustrated here. In our application we obtain a PublicKey or PrivateKey object which can used by our jwt library.