Could you update the documentation of JWT Token?

Search Guard
1

Hi,
Now the the documentation of JWT Token has an example of using the HS256 encryption. Could you update it with an example using RSA256 encryption? Does search guard now support RSA256?

2

And does it now support verifying other fields in the claims? Like exp(expiration time) or iss(issuer)?

3

And do I need to have a license to test the JWT feature?

在 2016年11月28日星期一 UTC+8下午5:52:07，王烁写道：

···

Hi,
Now the the documentation of JWT Token has an example of using the HS256 encryption. Could you update it with an example using RSA256 encryption? Does search guard now support RSA256?

4

You do not need a license for evaluation/test

Subject and Expirationdate claims are respected

The following JWS algorithms are supported:

  • Creating and parsing plaintext compact JWTs

  • Creating, parsing and verifying digitally signed compact JWTs (aka JWSs) with all standard JWS algorithms:

    • HS256: HMAC using SHA-256
    • HS384: HMAC using SHA-384
    • HS512: HMAC using SHA-512
    • RS256: RSASSA-PKCS-v1_5 using SHA-256
    • RS384: RSASSA-PKCS-v1_5 using SHA-384
    • RS512: RSASSA-PKCS-v1_5 using SHA-512
    • PS256: RSASSA-PSS using SHA-256 and MGF1 with SHA-256
    • PS384: RSASSA-PSS using SHA-384 and MGF1 with SHA-384
    • PS512: RSASSA-PSS using SHA-512 and MGF1 with SHA-512
    • ES256: ECDSA using P-256 and SHA-256
    • ES384: ECDSA using P-384 and SHA-384
    • ES512: ECDSA using P-521 and SHA-512

···

Am 28.11.2016 um 11:02 schrieb 王烁 <wangshuogr@gmail.com>:

And do I need to have a license to test the JWT feature?

在 2016年11月28日星期一 UTC+8下午5:52:07，王烁写道：
Hi,
  Now the the documentation of JWT Token has an example of using the HS256 encryption. Could you update it with an example using RSA256 encryption? Does search guard now support RSA256?

--
You received this message because you are subscribed to the Google Groups "Search Guard" group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.
To post to this group, send email to search-guard@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/b0f3a138-d682-4982-8efd-fd3f3c1506f5%40googlegroups.com\.
For more options, visit https://groups.google.com/d/optout\.

5

Docs updated: https://github.com/floragunncom/search-guard-docs/blob/master/jwt.md

···

Am Montag, 28. November 2016 11:00:06 UTC+1 schrieb 王烁:

And does it now support verifying other fields in the claims? Like exp(expiration time) or iss(issuer)?