This is an automated email from the ASF dual-hosted git repository.
exceptionfactory pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/nifi.git
The following commit(s) were added to refs/heads/main by this push:
new 4ce43a0089b NIFI-16539 Corrected JSON Web Signature key algorithm in
Administration Guide (#11881)
4ce43a0089b is described below
commit 4ce43a0089bf4873ceb08f8d1574bfb38e7d4d03
Author: Nikita Jare <[email protected]>
AuthorDate: Tue Nov 3 09:22:19 2026 -0500
NIFI-16539 Corrected JSON Web Signature key algorithm in Administration
Guide (#11881)
Signed-off-by: David Handermann <[email protected]>
---
nifi-docs/src/main/asciidoc/administration-guide.adoc | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/nifi-docs/src/main/asciidoc/administration-guide.adoc
b/nifi-docs/src/main/asciidoc/administration-guide.adoc
index 0aafc7579b9..039e1fc9eab 100644
--- a/nifi-docs/src/main/asciidoc/administration-guide.adoc
+++ b/nifi-docs/src/main/asciidoc/administration-guide.adoc
@@ -691,7 +691,8 @@ as well as the issuer and expiration from the configured
Login Identity Provider
NiFi uses generated Ed25519 Key Pairs to support the `EdDSA` algorithm for
JSON Web Signatures. The system stores Ed25519
Public Keys using the configured local State Provider and retains the Private
Key in memory. This approach supports signature verification
-for the expiration configured in the Login Identity Provider without
persisting the private key.
+for the expiration configured in the Login Identity Provider without
persisting the private key. NiFi generates RSA Key Pairs instead when the
+configured Security Providers do not support Ed25519.
JSON Web Token support includes revocation on logout using JSON Web Token
Identifiers. The system denies access for expired tokens based on the
Login Identity Provider configuration, but revocation invalidates the token
prior to expiration. The system stores revoked identifiers using the
@@ -702,7 +703,7 @@ The following settings can be configured in
_nifi.properties_ to control JSON We
[options="header"]
|==================================================================================================================================================
| Property Name | Description
-|`nifi.security.user.jws.key.rotation.period` | JSON Web Signature Key
Rotation Period defines how often the system generates a new RSA Key Pair,
expressed as an ISO 8601 duration. The default is one hour: `PT1H`
+|`nifi.security.user.jws.key.rotation.period` | JSON Web Signature Key
Rotation Period defines how often the system generates a new Key Pair for JSON
Web Signatures, expressed as an ISO 8601 duration. The default is one hour:
`PT1H`
|==================================================================================================================================================
[[x509_client_certificates]]
