What is a use case for having multiple signatures in a JWS that uses JWS JSON Serialization?

后端 未结 1 1121
隐瞒了意图╮
隐瞒了意图╮ 2021-01-21 06:20

I read the JSON Web Signature specification that can be found here. The spec defines two serialization representations for JSON Web Signatures. One is the JWS Compact Serializat

相关标签:
1条回答
  • 2021-01-21 06:43

    According to Florent Morselli's comment, there are at least 2 use cases:

    1. You sign a token with several signature algorithms (let say RS256, ES384 and PS512). depending on the audience capabilities (only supports ES384 algorithm), it will be able to verify the token.

    2. Several parties agree for a common payload. Each party sign the payload with its key and signatures are merged into a single token.

    0 讨论(0)
提交回复
热议问题