yiisoft / auth-jwt Goto Github PK

View Code? Open in Web Editor NEW

33.0 19.0 11.0 116 KB

Home Page: https://www.yiiframework.com/

License: BSD 3-Clause "New" or "Revised" License

PHP 100.00%

yii3 auth jwt-authentication middleware psr-15 hacktoberfest authentication

auth-jwt's People

Contributors

Stargazers

Watchers

Forkers

rustamwin skugarev dagpro allannp wiperawa fantom409 eluhr strorch sankaest seanpm2001 luizcmarin

auth-jwt's Issues

JWT encrypted with RS256 instead of HS256

What steps will reproduce the problem?

I am using an RS256 algorithm instead of the (default) HS256 algorithm. RS256 uses a public/private key pair instead of a secret. The TokenManager only implements the possibility to define a secret but not a public or private file path or encryption key.

config/web/auth.php

<?php

declare(strict_types=1);

/** 
 * @var array $params
 */

use Jose\Component\Signature\Algorithm\RS256;
use Yiisoft\Auth\Jwt\TokenManagerInterface;
use Yiisoft\Auth\Jwt\TokenManager;
use Yiisoft\Auth\AuthenticationMethodInterface;
use Yiisoft\Auth\Jwt\JwtMethod;

return [
    TokenManagerInterface::class => [
        '__class' => TokenManager::class,
        '__construct()' => [
             // `secret` not needed for this algorithm, but must be defined for the token manager constructor
            'secret' => $params['yiisoft/auth-jwt']['secret'],
            'algorithms' => [new RS256()]
           // where do i define the public/private key file path or the encryption key?
        ]
    ],
    AuthenticationMethodInterface::class => JwtMethod::class
];