Asymmetric signing of a JWT token
In the previous recipes, we were symmetrically signing the access token. That is, we were using the same key to sign the payload at the Authorization Server and to validate it on the Resource Server. This recipe presents you with another approach for signing JWT using asymmetric keys, where the Authorization Server uses a private key to sign the JWT payload and the Resource Server uses a public key to validate it.
Getting ready
To run this recipe, you will need to create a Spring Boot project for the Authorization Server using Java 8, Maven, Spring Web, and Spring Security. Some dependencies will be presented in the How to do it... section.
How to do it...
This recipe shows you how to create the Authorization Server that will be defined within the jwt-asymmetric-serverproject. This project is available on GitHub in the Chapter05 folder and all you will need to create this project is presented in the next steps:
- You can create the
jwt-asymmetric-serverproject...
