I've got a jwt base64 encoded payload and a public certificate. I am able to decode the payload in apex but having hard time validating the signature. Its header has the algorithm RS256. How do I do this in APEX?
2
-
Have you tried using this library github.com/salesforceidentity/jwt/blob/master/JWT.apex– Mohith ShrivastavaCommented May 17, 2017 at 3:50
-
1It helps to generate the payload by signing but not the other way round. My requirement is to decode and verify the signature.– user2454242Commented May 17, 2017 at 4:13
Add a comment
|
1 Answer
As of now the Apex Crypto Class doesn't support the verify method. https://developer.salesforce.com/docs/atlas.en-us.apexcode.meta/apexcode/apex_classes_restful_crypto.htm
And most of the examples found are for CallOuts.
