Self-Signed JWTs

Re:Self-Signed JWTs by danscan on Friday August 01, 2025 @11:44PM (#44764744)

Fair. I assume you mean asymmetric key cryptography and not JWKs in particular? JOSE is a pretty good library if you need the latter and you’re already working in JS

[ Parent | on HN ]

Re:Self-Signed JWTs by jacobljohnston on Saturday August 02, 2025 @12:43AM (#44764954)

We’re using JWKs.

[ Parent | on HN ]

Re:Self-Signed JWTs by danscan on Saturday August 02, 2025 @01:22AM (#44765073)

Ah, and just the subtle crypto API to generate keys? Or are you not generating them on the client?

[ Parent | on HN ]

Re:Self-Signed JWTs by motorest on Saturday August 02, 2025 @02:06AM (#44765202)

> Fair. I assume you mean asymmetric key cryptography and not JWKs in particular?

There's some degree of confusion in your comment. JWKs is a standard to represent cryptographic keys. It is an acronym for JSON Web key set.

> JOSE is a pretty good library (...)

JOSE is a set of standards that form a framework to securely transfer claims.

[ Parent | on HN ]