You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Anchorage currently issues and verifies HS256 JWTs. The SEP-10 specification also permits EdDSA. Adding EdDSA support would provide stronger asymmetric guarantees for tokens.
Acceptance Criteria
Add config for EdDSA public/private keys.
Update internal/token to support signing and parsing EdDSA.
Add comprehensive tests for EdDSA issuance and verification.
Summary
Anchorage currently issues and verifies HS256 JWTs. The SEP-10 specification also permits EdDSA. Adding EdDSA support would provide stronger asymmetric guarantees for tokens.
Acceptance Criteria
internal/tokento support signing and parsing EdDSA.Tech Stack
Go,
golang-jwt/jwt