[Dev] [APPM] JWT is signed by AppM gateway. But not the IDP. WDYT?

Hi all, AppM use JWT for transfer claims between AppM gateway and the backend application. JWT has been generated by extracting user claims from the SAML response which is provided by the IDP. Currently JWT is signed by the AppM gateway but not by the IDP. I think we need to sign the JWT by using

Re: [Dev] [APPM] JWT is signed by AppM gateway. But not the IDP. WDYT?

[Adding Prabath] In API Manager, JWT is generated as a part of key validation process (key manager) , hence the JWT is signed by KeyManager (IdP). But in App Manager, JWT generation happens at the gateway using the SAML response sent by IdP. Since GW is the one generating JWT, problem is how we ar

Re: [Dev] [APPM] JWT is signed by AppM gateway. But not the IDP. WDYT?

Hi Dinusha, JWT improvement(define a new interface and abstract class so that now we can implement the abstract class as an extension point.) is done. How could we deal with JWT signing? Please instruct me. *Sajith Abeywardhana* | Software Engineer WSO2, Inc | lean. enterprise. middleware. #20, P