PeopleTools and Lifecycle Management - PSFT (MOSC)

MOSC Banner

Options for JSON Web Tokens in PeopleCode

edited Nov 14, 2023 8:47PM in PeopleTools and Lifecycle Management - PSFT (MOSC) 3 commentsAnswered

Hello,

I was wondering what the best options are for decoding and verifying JSON web tokens in PeopleCode. We have been able to decode via use of the delivered base64_decode algorithm inside of an algorithm chain and profile utilized by the Crypt class.

What I haven't been able to do is figure out how to use the HS256 algorithm to verify the signature of a JWT as it doesn't appear to be a delivered algorithm.

Is there is a way to add HS256 to the list of usable algorithms?

Another direction I've started looking into is using a Java class to handle JWTs entirely instead of PeopleCode. Is there a java class available that can perform the functionality above? Would we have to load in an external class like Auth0 java-jwt?

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center