Is the JWT Claim Set in an Encrypted JWT from EncryptJWT class signed? #588
-
Is an Encrypted JWT from EncryptJWT class contains a signed JWT claim? In other words, is the Encrypted JWT from EncryptJWT class behaves like a Nested JWT with a JWS as the plaintext of the JWE? This is because in the documentation of the jwtDecrypt function mentions the wordings |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 2 replies
-
There is no JWS inside the JWE when you use EncryptJWT.
In other words, the JWT Claims Set (intentionally worded like so) is the cleartext of the JWE. The result is a JSON Web Token (JWT) that is encoded in a JWE, not JWS. |
Beta Was this translation helpful? Give feedback.
There is no JWS inside the JWE when you use EncryptJWT.
In other words, the JWT Claims Set (intentionally worded like so) is the cleartext of the JWE. The result is a JSON Web Token (JWT) that is encoded in a JWE, not JWS.