+dev

On Tue, Nov 21, 2017 at 9:14 AM, Inthirakumaaran Tharmakulasingham <
inthirakumaa...@wso2.com> wrote:

> ya with bas64 it will look like
>
> Access-Token = BASE64ENCODE(SHA256-Hash(TokenBindingID) + '&#%' +
> Random-UUID)
>
> FYI: If userNameAssertionEnabled then
>
> Access-Token = BASE64ENCODE(BASE64ENCODE(SHA256-Hash(TokenBindingID) + '
> &#%' + Random-UUID)+":"+userName)
>
> On Tue, Nov 21, 2017 at 7:25 AM, KasunG Gajasinghe <kas...@wso2.com>
> wrote:
>
>>
>> OK... So, following is the syntax right? I take it you base64 encode this
>> as well?
>>
>> Access-Token = SHA256-Hash(TokenBindingID) + '&#%' + Random-UUID
>>
>> On Tue, Nov 21, 2017 at 1:41 AM, Inthirakumaaran Tharmakulasingham <
>> inthirakumaa...@wso2.com> wrote:
>>
>>> Hi all,
>>>
>>> In my project token binding, I need to append the hash value of token
>>> binding Id to access token, refresh token and authorization code.For that,
>>> I need a magic String as a delimiter to separate token binding id and
>>> security tokens.
>>>
>>> Eg: if you take access token with token binding support then
>>>
>>> new access token = hash(tokenBindingID)+delimieter+normalAccessToken.
>>>
>>> Later on, this delimiter will be used in Introspection endpoint to
>>> extract the token binding hash value.The problem is user can configure his
>>> token generator in IS and that generator could use special characters.So I
>>> need a proper delimiter
>>>
>>> Currently, I am using "&#%" as the delimiter and made the delimiter
>>> configurable.Is this delimiter okay as default? Am I missing anything?
>>>
>>> Thanks,
>>>
>>> Regards,
>>> kumar
>>>
>>>
>>> --
>>> Inthirakumaaran
>>> Software Engineering - Intern | WSO2
>>>
>>> Email: inthirakumaa...@wso2.com
>>> Mobile:0766598050 <076%20659%208050>
>>>
>>>
>>
>>
>> --
>>
>> *Kasun Gajasinghe*Associate Technical Lead, WSO2 Inc.
>> email: kasung AT spamfree wso2.com
>> linked-in: http://lk.linkedin.com/in/gajasinghe
>> blog: http://kasunbg.org
>> phone: +1 650-745-4499 <+1%20650-745-4499>, 77 678 0813
>>
>>
>
>
>
> --
> Inthirakumaaran
> Software Engineering - Intern | WSO2
>
> Email: inthirakumaa...@wso2.com
> Mobile:0766598050 <076%20659%208050>
>
>


-- 

*Kasun Gajasinghe*Associate Technical Lead, WSO2 Inc.
email: kasung AT spamfree wso2.com
linked-in: http://lk.linkedin.com/in/gajasinghe
blog: http://kasunbg.org
phone: +1 650-745-4499, 77 678 0813
_______________________________________________
Dev mailing list
Dev@wso2.org
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to