jwk

1. Introduction to APIThis time with the external company, has been writing external API interface. The API interface provided is based on the HTTP protocol and is stateless. The authentication information must be brought on each request. The background service verifies the identity information.API authentication based on the HTTP protocol there are many ways, there are HTTP basic,http Digest,api Key,oauth,jwk, and so on, I only talk about the project

\_ FGFLP4LAJ4TCWMTRI6982HNC3XP2E-NF\_Z2XSPNIUOACTY7W042D\_CAJYYX\_TBEJAGOXM "} Sample code (JAVA) String keyId = Uuid.randomuuid (). toString (). ReplaceAll ("-", "" "); Rsajsonwebkey jwk = RSAJWKGENERATOR.GENERATEJWK (2048); Jwk.setkeyid (KEYID); Jwk.setalgorithm (algorithmidentifiers.ecdsa\_using\_p256\_curve\_and\_sha256); String PublicKey = Jwk.tojson (jsonwebkey.outputcontrollevel.public\_oNLY); String Privatekey = Jwk.tojson (jsonwebkey.outputco

http://xx.com/api/orders/123 for a particular resourcePOST create new resource http://xx.com/api/ordersPUT update resource http://xx.com/api/orders/123DELETE resource http://xx.com/api/orders/123========================================================== ====================The request data is generally expressed in json or xml format. json is recommended.0x02 Identity AuthenticationThere are many identity authentication methods, including HTTP Basic, HTTP Digest, api key, Oauth, and

: SIGNATURE-RSA/RSAPSS/ECDSA/DSA digital Signtature class wrapper of Java JCE style Messagedigest-cryptographic hash Calculation class wrapper of Java JCE style Mac-message Authentication code Hash calculation class wrapper of Java JCE style ASN.1 Encoder/generator ASN.1 structure for Ceritificate, CRL and CSR (pkcs#10) generation ASN.1 structure for CMS signeddata generation ASN.1 structure for RFC 3161 TimeStamp generation ASN.1 structure for RFCs 5126 cade

-oauth 2.0 Token RevocationRfc7662-oauth 2.0 Token IntrospectionDraft OAuth related extensions:https://datatracker.ietf.org/wg/oauth/charter/https://tools.ietf.org/wg/oauth/JWT Related protocol families:Rfc7515-json Web Signature (JWS)Rfc7516-json Web Encryption (JWE)Rfc7517-json Web Key (JWK)Rfc7518-json Web Algorithms (JWA)Rfc7519-json Web Token (JWT)JWT Official site: Https://jwt.ioClaims:https://en.wikipedia.org/wiki/claims-based_identityA set of