CODEWITHSUNDEEP
openid-connectwso2-identity-server
Jose Loor
Jose Loor

Reputation: 205

How to configure wso2is to generate signed and encrypted Openid Connect token?

Is it possible to configure wso2is to generate signed and encrypted Openid Connect token? And how can I validate these token on client?

Upvotes: 0

Views: 83

Answers (1)

farasath
farasath

Reputation: 3011

By default OpenID Connect Token is signed by WSO2 Identity Server. To verify the signature you can use a code snippet from this doc.

As of the current implementation, we do not support encrypting the id_token out of the box. You do have the liberty to extend the default id_token building logic by writing an extension to encrypt the id_token. (If you want more details I'll update the answer with more details)

Update: ID Token Encryption is supported OOTB with WSO2 Identity Server 5.5.0 onwards. Check https://docs.wso2.com/display/IS550/Testing+OIDC+Encrypted+ID+Token+with+IS

Upvotes: 1

Related Questions