exceptionfactory commented on pull request #5262: URL: https://github.com/apache/nifi/pull/5262#issuecomment-893981880
Following additional review of [RFC 7518 Section 8](https://datatracker.ietf.org/doc/html/rfc7518#section-8.3), I adjusted the signing algorithm to `PS512` instead of `RS512` in order to use `RSASSA-PSS` instead of `RSASSA-PKCS1-v1_5`. The Nimbus JWT library supports both algorithms and as a self-contained implementation, this provides better security for signing with the same RSA Key Pair approach. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
