-
Type:
Task
-
Status: Resolved
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: None
-
Component/s: None
-
Tags:
-
Team:PLATFORM
Our documentation for the JWT authentication option is lacking / misleading. Please see the email to Ed regarding JWT access.
Page: https://doc.nuxeo.com/nxdoc/using-oauth2/#requesting-an-access-token-with-a-jwt
We are missing a couple steps:
- Setting nuxeo.jwt.secret is not called out for JWT usage (except in the Java client page: https://doc.nuxeo.com/client-java/3.2/authentication/#jwt-authentication)
- Required algorithm: HS512
- Issuer is required: ... "iss":"nuxeo" ... is a hard-coded check
- Timestamp is used for TTL
