cerulean nymph
I'm trying to issue an JWT with type "at+jwt" . But in ballerina JWT library, the type value is hardcoded to "JWT". [1]
Is there any workaround to change the type value?
[1] https://github.com/ballerina-platform/module-ballerina-jwt/blob/master/ballerina/jwt_issuer.bal#L175
shell loom
Looping in @flint apex @vast condor
flint apex
@cerulean nymph currently there is no work around for this. As per the JWT spec [1] it is recommended to use JWT as the default value for the typ header parameter, hence the ballerina implementation does this.
exotic cloud
@cerulean nymph Are you working with a client that sends the JWT with that name?
cerulean nymph
I'm trying to develop a basic sts using ballerina which sends JWT access tokens. According to the JWT Access Token Spec, typ parameter should be at+jwt.
https://datatracker.ietf.org/doc/html/rfc9068#name-header
flint apex
@cerulean nymph the above spec describes the access-token generated for Oauth2 JWT bearer flow and currently this is not covered by Ballerina JWT module (which specifically deals with generating and validating self-signed JWT) since generating Oauth2 tokens is an IdP functionality. But, we will check whether there is a possibility to extend the functionality of the Ballerina JWT module with this.
tribal aspen
@cerulean nymph you can do this with the oauth2 module, overriding the AUTH_HEADER_BEARER config parameter