From 25a2cf57b98f071e34fde24fa22375463c6e0547 Mon Sep 17 00:00:00 2001 From: Spomky Date: Tue, 9 Jan 2018 12:52:54 +0100 Subject: [PATCH] Key ID Support (#35) Fixes #33 --- Checker/AlgHeaderChecker.php | 2 +- Checker/EncHeaderChecker.php | 2 +- Checker/IssuerChecker.php | 2 +- .../Compiler/EncryptionSupportCompilerPass.php | 2 +- DependencyInjection/Configuration.php | 2 +- DependencyInjection/SpomkyLabsLexikJoseExtension.php | 2 +- Encoder/LexikJoseEncoder.php | 11 +++++------ SpomkyLabsLexikJoseBundle.php | 2 +- Tests/Bundle/TestBundle/Checker/IpClaimChecker.php | 2 +- Tests/Bundle/TestBundle/Controller/ApiController.php | 2 +- .../Bundle/TestBundle/Controller/LoginController.php | 2 +- .../DependencyInjection/SpomkyLabsTestExtension.php | 2 +- Tests/Bundle/TestBundle/EventListener/JWTListener.php | 2 +- Tests/Bundle/TestBundle/SpomkyLabsTestBundle.php | 2 +- Tests/Context/FeatureContext.php | 2 +- Tests/Context/LoginContext.php | 10 +++++++--- Tests/Context/RequestBuilder.php | 2 +- Tests/Context/RequestContext.php | 2 +- Tests/Context/ResponseContext.php | 2 +- Tests/app/AppKernel.php | 2 +- Tests/app/autoload.php | 2 +- Tests/app/config/config.yml | 8 ++++---- 22 files changed, 35 insertions(+), 32 deletions(-) diff --git a/Checker/AlgHeaderChecker.php b/Checker/AlgHeaderChecker.php index c1317e8..26740e3 100644 --- a/Checker/AlgHeaderChecker.php +++ b/Checker/AlgHeaderChecker.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. diff --git a/Checker/EncHeaderChecker.php b/Checker/EncHeaderChecker.php index f238b89..117453e 100644 --- a/Checker/EncHeaderChecker.php +++ b/Checker/EncHeaderChecker.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. diff --git a/Checker/IssuerChecker.php b/Checker/IssuerChecker.php index 6d68a75..7cdeae5 100644 --- a/Checker/IssuerChecker.php +++ b/Checker/IssuerChecker.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. diff --git a/DependencyInjection/Compiler/EncryptionSupportCompilerPass.php b/DependencyInjection/Compiler/EncryptionSupportCompilerPass.php index 23e4287..f3836f6 100644 --- a/DependencyInjection/Compiler/EncryptionSupportCompilerPass.php +++ b/DependencyInjection/Compiler/EncryptionSupportCompilerPass.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. diff --git a/DependencyInjection/Configuration.php b/DependencyInjection/Configuration.php index 73b7b0c..5bb1012 100644 --- a/DependencyInjection/Configuration.php +++ b/DependencyInjection/Configuration.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. diff --git a/DependencyInjection/SpomkyLabsLexikJoseExtension.php b/DependencyInjection/SpomkyLabsLexikJoseExtension.php index a4ebfb5..f1cee19 100644 --- a/DependencyInjection/SpomkyLabsLexikJoseExtension.php +++ b/DependencyInjection/SpomkyLabsLexikJoseExtension.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. diff --git a/Encoder/LexikJoseEncoder.php b/Encoder/LexikJoseEncoder.php index edf1d0e..78d82e9 100644 --- a/Encoder/LexikJoseEncoder.php +++ b/Encoder/LexikJoseEncoder.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. @@ -123,7 +123,7 @@ final class LexikJoseEncoder implements JWTEncoderInterface * @param ClaimCheckerManager $claimCheckerManager * @param HeaderCheckerManager $signatureHeaderCheckerManager * @param JWKSet $signatureKeyset - * @param int $signatureKeyIndex + * @param int|string $signatureKeyIndex * @param string $signatureAlgorithm * @param string $issuer * @param int $ttl @@ -133,7 +133,7 @@ public function __construct(JWSBuilder $jwsBuilder, ClaimCheckerManager $claimCheckerManager, HeaderCheckerManager $signatureHeaderCheckerManager, JWKSet $signatureKeyset, - int $signatureKeyIndex, + $signatureKeyIndex, string $signatureAlgorithm, string $issuer, int $ttl @@ -154,11 +154,11 @@ public function __construct(JWSBuilder $jwsBuilder, * @param JWEDecrypter $jweLoader * @param HeaderCheckerManager $encryptionHeaderCheckerManager * @param JWKSet $encryptionKeyset - * @param int $encryptionKeyIndex + * @param int|string $encryptionKeyIndex * @param string $keyEncryptionAlgorithm * @param string $contentEncryptionAlgorithm */ - public function enableEncryptionSupport(JWEBuilder $jweBuilder, JWEDecrypter $jweLoader, HeaderCheckerManager $encryptionHeaderCheckerManager, JWKSet $encryptionKeyset, int $encryptionKeyIndex, string $keyEncryptionAlgorithm, string $contentEncryptionAlgorithm) + public function enableEncryptionSupport(JWEBuilder $jweBuilder, JWEDecrypter $jweLoader, HeaderCheckerManager $encryptionHeaderCheckerManager, JWKSet $encryptionKeyset, $encryptionKeyIndex, string $keyEncryptionAlgorithm, string $contentEncryptionAlgorithm) { $this->jweBuilder = $jweBuilder; $this->jweLoader = $jweLoader; @@ -332,7 +332,6 @@ private function getSignatureHeader() { return [ 'typ' => 'JWT', - 'cty' => 'JWT', 'alg' => $this->signatureAlgorithm, 'crit' => ['alg'], ]; diff --git a/SpomkyLabsLexikJoseBundle.php b/SpomkyLabsLexikJoseBundle.php index 8bf5ac7..2705c2e 100644 --- a/SpomkyLabsLexikJoseBundle.php +++ b/SpomkyLabsLexikJoseBundle.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. diff --git a/Tests/Bundle/TestBundle/Checker/IpClaimChecker.php b/Tests/Bundle/TestBundle/Checker/IpClaimChecker.php index 37973f9..e191473 100644 --- a/Tests/Bundle/TestBundle/Checker/IpClaimChecker.php +++ b/Tests/Bundle/TestBundle/Checker/IpClaimChecker.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. diff --git a/Tests/Bundle/TestBundle/Controller/ApiController.php b/Tests/Bundle/TestBundle/Controller/ApiController.php index 042de6c..d9326cf 100644 --- a/Tests/Bundle/TestBundle/Controller/ApiController.php +++ b/Tests/Bundle/TestBundle/Controller/ApiController.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. diff --git a/Tests/Bundle/TestBundle/Controller/LoginController.php b/Tests/Bundle/TestBundle/Controller/LoginController.php index f40d312..92becf5 100644 --- a/Tests/Bundle/TestBundle/Controller/LoginController.php +++ b/Tests/Bundle/TestBundle/Controller/LoginController.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. diff --git a/Tests/Bundle/TestBundle/DependencyInjection/SpomkyLabsTestExtension.php b/Tests/Bundle/TestBundle/DependencyInjection/SpomkyLabsTestExtension.php index b1534a9..fd3648f 100644 --- a/Tests/Bundle/TestBundle/DependencyInjection/SpomkyLabsTestExtension.php +++ b/Tests/Bundle/TestBundle/DependencyInjection/SpomkyLabsTestExtension.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. diff --git a/Tests/Bundle/TestBundle/EventListener/JWTListener.php b/Tests/Bundle/TestBundle/EventListener/JWTListener.php index dd30695..34f7fd3 100644 --- a/Tests/Bundle/TestBundle/EventListener/JWTListener.php +++ b/Tests/Bundle/TestBundle/EventListener/JWTListener.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. diff --git a/Tests/Bundle/TestBundle/SpomkyLabsTestBundle.php b/Tests/Bundle/TestBundle/SpomkyLabsTestBundle.php index ffc14ed..e866a27 100644 --- a/Tests/Bundle/TestBundle/SpomkyLabsTestBundle.php +++ b/Tests/Bundle/TestBundle/SpomkyLabsTestBundle.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. diff --git a/Tests/Context/FeatureContext.php b/Tests/Context/FeatureContext.php index fa5828b..32d087f 100644 --- a/Tests/Context/FeatureContext.php +++ b/Tests/Context/FeatureContext.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. diff --git a/Tests/Context/LoginContext.php b/Tests/Context/LoginContext.php index b22da13..244b121 100644 --- a/Tests/Context/LoginContext.php +++ b/Tests/Context/LoginContext.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. @@ -318,7 +318,9 @@ public function iStoreTheToken() */ private function getSignatureKey(): JWK { - return $this->getContainer()->get('jose.key_set.lexik_jose_bridge.signature')->get(0); + $keyIndex = $this->getContainer()->getParameter('lexik_jose_bridge.encoder.key_index'); + + return $this->getContainer()->get('jose.key_set.lexik_jose_bridge.signature')->get($keyIndex); } /** @@ -326,6 +328,8 @@ private function getSignatureKey(): JWK */ private function getEncryptionKey(): JWK { - return $this->getContainer()->get('jose.key_set.lexik_jose_bridge.encryption')->get(0); + $keyIndex = $this->getContainer()->getParameter('lexik_jose_bridge.encoder.encryption.key_index'); + + return $this->getContainer()->get('jose.key_set.lexik_jose_bridge.encryption')->get($keyIndex); } } diff --git a/Tests/Context/RequestBuilder.php b/Tests/Context/RequestBuilder.php index c809cf5..ddbee59 100644 --- a/Tests/Context/RequestBuilder.php +++ b/Tests/Context/RequestBuilder.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. diff --git a/Tests/Context/RequestContext.php b/Tests/Context/RequestContext.php index 41a1c1f..fa6efa8 100644 --- a/Tests/Context/RequestContext.php +++ b/Tests/Context/RequestContext.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. diff --git a/Tests/Context/ResponseContext.php b/Tests/Context/ResponseContext.php index fb3f9bb..09de271 100644 --- a/Tests/Context/ResponseContext.php +++ b/Tests/Context/ResponseContext.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. diff --git a/Tests/app/AppKernel.php b/Tests/app/AppKernel.php index 2f080cd..3bd20de 100644 --- a/Tests/app/AppKernel.php +++ b/Tests/app/AppKernel.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. diff --git a/Tests/app/autoload.php b/Tests/app/autoload.php index b9154a6..76213c9 100644 --- a/Tests/app/autoload.php +++ b/Tests/app/autoload.php @@ -3,7 +3,7 @@ /* * The MIT License (MIT) * - * Copyright (c) 2014-2017 Spomky-Labs + * Copyright (c) 2014-2018 Spomky-Labs * * This software may be modified and distributed under the terms * of the MIT license. See the LICENSE file for details. diff --git a/Tests/app/config/config.yml b/Tests/app/config/config.yml index 69c2c36..4e37c13 100644 --- a/Tests/app/config/config.yml +++ b/Tests/app/config/config.yml @@ -27,14 +27,14 @@ twig: lexik_jose: ttl: 1000 server_name: 'https://my.super-service.org/' - key_set: '{"keys":[{"kty":"RSA","n":"pSTpJCCjswGaJrmIDj2lVe4eQL2pQaxeCSjuqvNcBs-qTNs_82HVR5m4O-bDjkajIcmMOtVdIdIfdHWfAvEVD2_jQQ_V-9H2jEB_YTkn70VJm2qCJa35FVhVCnFOUfSXfpjmBNLIlcuwe2j5dzXtORKCt5p2f2XmkkSqws0HyFs","e":"AQAB","d":"DtZCG_zSuEJslw4UKzNep1m9XhOsITpbOHd0-ebjXblKk50fIb6oasZkxvz0lNPD1EVHVAHXXDKEoPHwV1NRkOx56uGgH7WcP31r2rUM44h0eeT1wEGqY_7RqEFrAV7_GlVp0KiTHBmW6HEiSa6tG4Veu7Tbl7Gg1JyhHKHPyQ","p":"2hDoCz1736PmLuMktpGBRklAnL9fWGHVbeo43x3J9w-iowOlG30itid8m0mGCbJtk9jPkB5e3XzAiP07kJ4YBQ","q":"wd8-xuZa0-PReXcDbWNGHJDyvca4y2OGeMe6exdd0P0Ezr9TyTfEnnKlaQv-WSbfj5vyUa3XnDd2BHjzoXAs3w","dp":"C0y8-XgiJyCTGPLkQCGiFUZOdtDj2-yV5rAwaj9c69R_lPrnX1lIpy-8oT9aFr6MNxEREGLCf6-rOm4E3CWVEQ","dq":"HdtwwpcFU-6Y-xjeGUGZsZqNF7b8DK62LfGsgXp2w1HEJMcIc0u4ZyKG4Oes8zPuaCJ_Lh8UvoU4ErZB5xHshw","qi":"0PPFtKlMfHRXsfLsTOu0nqWjiWPzmRphetxyLhBvB_mSfflxbT3tfYBq7PYTzi3oW19UF0hdBPkAtcT5QHBO1g"},{"kty":"RSA","n":"sENupqqKb3uYHOtUtMJot_mbW6s4WLHs0D3p7UX2IUtOwbo835BRxGVz99T5YIa6JEq9jB3U4HkLaSZU6vk8zy4DNjIFW86HApH5x_TNf6-vuuuNTAAEvuDW5F7xunuxcVpJWWzQvV0-ZV8ANliaZHDcPVcsNmFYIKpw1j8pF_k","e":"AQAB","d":"Ar2Zq9e8_UzDqbdzArh_HlUwODWqU564muhLidfrosrj95kotyUsUExviCv0kK6nmEbdOZ-BHthi-AiTi2_CpUNlRemCp_5Qx3iNitTjsj_aTRDRjF4fLXIjxNOpEXlYW3fTw6a-XfQisHBLt15Gfrm-EErbde0jzTNmlwc93oE","p":"5-4NeSl_EiRNdjeXuj9Blv1e4dxUhFso7tSX59uY4YHYN4uu2g0sZ8ajGrG1DPrTrK6quWZvXvskX4hbyveOCQ","q":"wo5sm5LhQ9qYoupJvtHJo_0-3ZKFgk8AYsF9mQdGbcLdK_pXyshqZRoohRWPng9cc5ZTU7kE6U8VHPx3--G2cQ","dp":"5uOzIAqyiQIA545iizSL_F-ShLFOplEGR_T2oQiZgu47rNhvIn541XsHRvzgq-JMth1Qsq-Kcfj89eoOz9lw2Q","dq":"EzODPIdufAfi8JE23gJOaETiI3QGgSnS2-xEvQmexc5pjaGTcIv_FCNUxG2wUuUpNq8rYiPsfCo15zpzjQRlwQ","qi":"bj1YjOHUKqET04ijrENDEnntjfEIs_cIJ4Vlqo5sCk_rA0OwUO9mXMPaopRMSOpNEvMumOn-gwlVfGU9UJIGlw"},{"kty":"RSA","n":"4VVVSEc47hQkFTE_xWXi8_L7IGS12thhnwrjaYdeAi3LJ-YhmhKB12Atc8gR43wS7gtbBmnGX-vK9nr_amWZRpdnaMPYfJGtgPnVlFDDdW3ih_a0lGz5pjGM1OVf7eHbHOgcIzl10LejgpBrPTDtMfMQ-BaHCSidlHiDyEIXUgk","e":"AQAB","d":"1pCQDawsLKAnH7rus4PqUUsND_J2LDag9nXCyGjq_n4mlg6P7osy8igV_8sCJbCuwdc0TO4JxKrdcEj8z46BHKn2FVi6OOYo5LLr_GvmYjwMzHCmSkFDepme76lt-n9GUZBzbR_C346JfTYurIlxYI5Bp6irERrPbTTHt3DDUAE","p":"_Fcesus5qT7vA1kwJiXQSX0qXRFVKYCM4Y3-yRWy_A7JJ_gnQbWrcTIEQnkeBAuoZv7fFLdZYNJNvxcXiu0CAQ","q":"5JnxUr-6Y1kZgnjM57vXUaXH8MhXBX1Gh_CFwzteM1CTX4EWEtmWHAz3DALSuLKmFGdNLIM3wfuso6_om0JACQ","dp":"pWk2ZnJrSdZHNxqvxVHkR0gVDQzflmT99Jzv90CSI0hN9DVnBlvgFkODJ0_drSk3KszHzvyhSiaRcEHi3N6gAQ","dq":"Oeq2tVxWAK2mROQOJff1SX5S9bIMOhvPLsnFWf1ElIOpktzFlukBmwG95ZEhiiHY6fpyFwD3s3Hr_1yl9hAG4Q","qi":"siHzVDQNwhpSVYy5knDeJKPDuda5lhpS_Wc9Lk6hdzSj4FShI4G2Ohd4XSImrORBjA8vy5Nlt7EO7hq7S-6x7g"}]}' - key_index: 0 + key_set: '{"keys":[{"kid":"KEY_ID_0","kty":"RSA","n":"pSTpJCCjswGaJrmIDj2lVe4eQL2pQaxeCSjuqvNcBs-qTNs_82HVR5m4O-bDjkajIcmMOtVdIdIfdHWfAvEVD2_jQQ_V-9H2jEB_YTkn70VJm2qCJa35FVhVCnFOUfSXfpjmBNLIlcuwe2j5dzXtORKCt5p2f2XmkkSqws0HyFs","e":"AQAB","d":"DtZCG_zSuEJslw4UKzNep1m9XhOsITpbOHd0-ebjXblKk50fIb6oasZkxvz0lNPD1EVHVAHXXDKEoPHwV1NRkOx56uGgH7WcP31r2rUM44h0eeT1wEGqY_7RqEFrAV7_GlVp0KiTHBmW6HEiSa6tG4Veu7Tbl7Gg1JyhHKHPyQ","p":"2hDoCz1736PmLuMktpGBRklAnL9fWGHVbeo43x3J9w-iowOlG30itid8m0mGCbJtk9jPkB5e3XzAiP07kJ4YBQ","q":"wd8-xuZa0-PReXcDbWNGHJDyvca4y2OGeMe6exdd0P0Ezr9TyTfEnnKlaQv-WSbfj5vyUa3XnDd2BHjzoXAs3w","dp":"C0y8-XgiJyCTGPLkQCGiFUZOdtDj2-yV5rAwaj9c69R_lPrnX1lIpy-8oT9aFr6MNxEREGLCf6-rOm4E3CWVEQ","dq":"HdtwwpcFU-6Y-xjeGUGZsZqNF7b8DK62LfGsgXp2w1HEJMcIc0u4ZyKG4Oes8zPuaCJ_Lh8UvoU4ErZB5xHshw","qi":"0PPFtKlMfHRXsfLsTOu0nqWjiWPzmRphetxyLhBvB_mSfflxbT3tfYBq7PYTzi3oW19UF0hdBPkAtcT5QHBO1g"},{"kid":"KEY_ID_1","kty":"RSA","n":"sENupqqKb3uYHOtUtMJot_mbW6s4WLHs0D3p7UX2IUtOwbo835BRxGVz99T5YIa6JEq9jB3U4HkLaSZU6vk8zy4DNjIFW86HApH5x_TNf6-vuuuNTAAEvuDW5F7xunuxcVpJWWzQvV0-ZV8ANliaZHDcPVcsNmFYIKpw1j8pF_k","e":"AQAB","d":"Ar2Zq9e8_UzDqbdzArh_HlUwODWqU564muhLidfrosrj95kotyUsUExviCv0kK6nmEbdOZ-BHthi-AiTi2_CpUNlRemCp_5Qx3iNitTjsj_aTRDRjF4fLXIjxNOpEXlYW3fTw6a-XfQisHBLt15Gfrm-EErbde0jzTNmlwc93oE","p":"5-4NeSl_EiRNdjeXuj9Blv1e4dxUhFso7tSX59uY4YHYN4uu2g0sZ8ajGrG1DPrTrK6quWZvXvskX4hbyveOCQ","q":"wo5sm5LhQ9qYoupJvtHJo_0-3ZKFgk8AYsF9mQdGbcLdK_pXyshqZRoohRWPng9cc5ZTU7kE6U8VHPx3--G2cQ","dp":"5uOzIAqyiQIA545iizSL_F-ShLFOplEGR_T2oQiZgu47rNhvIn541XsHRvzgq-JMth1Qsq-Kcfj89eoOz9lw2Q","dq":"EzODPIdufAfi8JE23gJOaETiI3QGgSnS2-xEvQmexc5pjaGTcIv_FCNUxG2wUuUpNq8rYiPsfCo15zpzjQRlwQ","qi":"bj1YjOHUKqET04ijrENDEnntjfEIs_cIJ4Vlqo5sCk_rA0OwUO9mXMPaopRMSOpNEvMumOn-gwlVfGU9UJIGlw"},{"kid":"KEY_ID_2","kty":"RSA","n":"4VVVSEc47hQkFTE_xWXi8_L7IGS12thhnwrjaYdeAi3LJ-YhmhKB12Atc8gR43wS7gtbBmnGX-vK9nr_amWZRpdnaMPYfJGtgPnVlFDDdW3ih_a0lGz5pjGM1OVf7eHbHOgcIzl10LejgpBrPTDtMfMQ-BaHCSidlHiDyEIXUgk","e":"AQAB","d":"1pCQDawsLKAnH7rus4PqUUsND_J2LDag9nXCyGjq_n4mlg6P7osy8igV_8sCJbCuwdc0TO4JxKrdcEj8z46BHKn2FVi6OOYo5LLr_GvmYjwMzHCmSkFDepme76lt-n9GUZBzbR_C346JfTYurIlxYI5Bp6irERrPbTTHt3DDUAE","p":"_Fcesus5qT7vA1kwJiXQSX0qXRFVKYCM4Y3-yRWy_A7JJ_gnQbWrcTIEQnkeBAuoZv7fFLdZYNJNvxcXiu0CAQ","q":"5JnxUr-6Y1kZgnjM57vXUaXH8MhXBX1Gh_CFwzteM1CTX4EWEtmWHAz3DALSuLKmFGdNLIM3wfuso6_om0JACQ","dp":"pWk2ZnJrSdZHNxqvxVHkR0gVDQzflmT99Jzv90CSI0hN9DVnBlvgFkODJ0_drSk3KszHzvyhSiaRcEHi3N6gAQ","dq":"Oeq2tVxWAK2mROQOJff1SX5S9bIMOhvPLsnFWf1ElIOpktzFlukBmwG95ZEhiiHY6fpyFwD3s3Hr_1yl9hAG4Q","qi":"siHzVDQNwhpSVYy5knDeJKPDuda5lhpS_Wc9Lk6hdzSj4FShI4G2Ohd4XSImrORBjA8vy5Nlt7EO7hq7S-6x7g"}]}' + key_index: "KEY_ID_0" signature_algorithm: 'RS512' # The signature algorithm we want to use claim_checked: - 'lexik_jose_checker_claim_ip' encryption: enabled: true # We enable the encryption support - key_set: '{"keys":[{"kty":"oct","k":"z4nNE2pBccJDVs8Qnk7Znt1hTL3sqXz2kF3dsJqN_xE"},{"kty":"oct","k":"sT3DyQXDIOwe6ADQtqusXAMyC-IaJZ2qqVvyK_d6P00"},{"kty":"oct","k":"YLSnh2cw6qVtv1bRjOdHBS3fkF7e3HGbe04nBcuRflM"}]}' - key_index: 0 + key_set: '{"keys":[{"kid":"KEY_ID_0","kty":"oct","k":"z4nNE2pBccJDVs8Qnk7Znt1hTL3sqXz2kF3dsJqN_xE"},{"kid":"KEY_ID_1","kty":"oct","k":"sT3DyQXDIOwe6ADQtqusXAMyC-IaJZ2qqVvyK_d6P00"},{"kid":"KEY_ID_2","kty":"oct","k":"YLSnh2cw6qVtv1bRjOdHBS3fkF7e3HGbe04nBcuRflM"}]}' + key_index: "KEY_ID_0" key_encryption_algorithm: 'A256GCMKW' # The key encryption algorithm content_encryption_algorithm: 'A256GCM' # The content encryption algorithm