Skip to content

Is the JWT Claim Set in an Encrypted JWT from EncryptJWT class signed? #588

Answered by panva
langtutheky asked this question in Q&A
Discussion options

You must be logged in to vote

There is no JWS inside the JWE when you use EncryptJWT.

The EncryptJWT class is used to build and encrypt Compact JWE formatted JSON Web Tokens.

In other words, the JWT Claims Set (intentionally worded like so) is the cleartext of the JWE. The result is a JSON Web Token (JWT) that is encoded in a JWE, not JWS.

Replies: 1 comment 2 replies

Comment options

You must be logged in to vote
2 replies
@langtutheky
Comment options

@panva
Comment options

panva Oct 6, 2023
Maintainer

Answer selected by langtutheky
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
2 participants