Plug-in (Function & Smart Service)Free

JWT

by Appian Corporation

Description

Generate and validate JSON web tokens for use in integrating and authenticating with external systems, using a JWKS registry to get public keys for token signature validation. The create token functions support encrypted private keys in either the PKCS#1 or PCKS#8 standard

Features

createtoken (Function) - create a signed JSON web token with standard claims. createtokenwithcustomclaims (Function) - create a signed JSON web token with standard claims and additional custom claims that may be required for authentication with specific systems. validatejwtsignature (Function) - Verify a received token against the issuing system's public key. Supports tokens encrypted with the RSA256 and RSA512 algorithm. Returns true if token was verified. decodeJWT (Function) - Given a JWKS registry URL and a token, retrieve the proper public key and validate the given token returning an string with the decoded token if signature is valid, null otherwise createDocuSignRSAJWTToken (Function) - Generates a JWT that conforms to the specs of DocuSign.

Release notes

Upgraded transitive dependencies for jjwt library for Expression Evaluation fix.

Version history (13)

1.5.0

Upgraded jjwt library for vulnerability fix.

1.4.11

  • Updated createtokenwithcustomclaims to allow for custom headers to be provided as an input. This gives support to DPoP OAuth extension.

1.4.10

  • The createtoken and createtokenwithcustomclaims functions now supports PKCS#8 (RSA only) private keys in addition to PKCS#1
  • The validatejwtsignature function now supports the RSA256 algorithm in addition to RSA512

1.4.9

Upgraded Bouncy Castle Provider libraries

1.4.8

Updated jackson databind, jwks-rsa, and guava libraries. Added License File.

1.4.7

  1. Adding iat to createtoken and createtokenwithcustomclaims
  2. Remove iss and aud when null

IMPORTANT

If upgrading from 1.4.4 or below and using the claims parameter with createtokenwithcustomclaims, you will need to refactor the usage. Version 1.4.5 added a new parameter "ver" before the "claims" parameter and functions use parameters in the order they are referenced.

1.4.6

Updated the bouncycastle bcpkix and bouncycastle bcprov libraries.

1.4.5

new "ver" header parameter for the createTokenWithCustomClaims Function as some specific systems require a "ver" header

1.4.4

Security Updates

1.4.3

Security Updates

1.4.2

Added a decodeJWT function that uses a JWKS registry to retrieve public keys for token signature validation

Last jira ticket: https://issues.appian.com/browse/AN-200423

1.3.0

Added function createdocusignrsajwttoken, can be used to create a DocuSign accepted JWT token

UPDATE

PLEASE UPDATE

Resources