Question
Tech Mahindra Ltd
CA
Last activity: 23 Jul 2019 15:34 EDT
How to generate JWT token with custom header using OOTB Token Profile Data Instance
We are using Token Profile data instance to create JSON webtoken (using the pxGenerateJWT activity). As per the pega help of Token Profile data instance ,The following required headers are added automatically:
alg – The used JWS algorithm, which is in the Security section, on the Generation tab.
cty – The content type is populated by default as application/json.
typ – The type is always JWT.
kid – The Key ID is a unique ID generated by the JWT runtime for each token generated.
crit – Headers that are marked as critical on the Generation tab.
The service which I am consuming for my application , requires us to send constant value for kid . How this can be achieved ?
Pegasystems Inc.
US
What service are you consuming? Can you elaborate on the use case? All the generation logic is in java code, we may need to investigate further and would like to know your use cases in details.
Tech Mahindra Ltd
CA
Hi Kevin,
We are trying to integrate with box using JWT . According to box documentation consumer needs to create a public key and store it in BOX. In turns BOX will generate an unique key (PublickeyID) which consumer needs to use for the generation(to sign the claims using the private key, we need to use PublickeyID as kid value) of the JWT. You may find their documentation from the URL below.
https://developer.box.com/docs/construct-jwt-claim-manually#section-1-read-json-config
JP Morgan Chase
US
We have run into the same problem as above in that the service we are calling is expecting the "kid" value in our JWT to be a public key thumbprint. Is this possible?
Pegasystems Inc.
US
Hi @TerenceY0215!
This is an older thread and you may not receive a reply. Thank you for opening a new post to alert the rest of the Community with your question.