Skip to content
This repository was archived by the owner on May 31, 2022. It is now read-only.

JwtAccessTokenConverter#setSigningKey expects public key instead of private key for RSA signing #893

Open
phrinx opened this issue Oct 27, 2016 · 0 comments
Open

JwtAccessTokenConverter#setSigningKey expects public key instead of private key for RSA signing #893

phrinx opened this issue Oct 27, 2016 · 0 comments
Labels
status: waiting-for-triage

Comments

@phrinx
Copy link
Contributor

phrinx commented Oct 27, 2016

This seems to be a bug to me for signatures using RSA as they should be done with private key: https://github.com/spring-projects/spring-security-oauth/blob/0f43bb8c0de8be261479dc5d88926821f55468ca/spring-security-oauth2/src/main/java/org/springframework/security/oauth2/provider/token/store/JwtAccessTokenConverter.java#L169

To compare - see also: https://github.com/spring-projects/spring-security-oauth/blob/0f43bb8c0de8be261479dc5d88926821f55468ca/spring-security-oauth2/src/main/java/org/springframework/security/oauth2/provider/token/store/JwtAccessTokenConverter.java#L150
ohr added a commit to ohr/spring-security-oauth that referenced this issue Dec 22, 2016
@ohr
spring-attic#893,spring-attic#865,spring-attic#575:initial commit usi…
8f8293c 
…ng Nimbus lib, also using JWKs
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
status: waiting-for-triage
Milestone
No milestone
Development

No branches or pull requests
2 participants
@phrinx @spring-projects-issues