diff --git a/modules/reference/pages/feature/jwt/examples.adoc b/modules/reference/pages/feature/jwt/examples.adoc index 50a3d190d8..62aa059ebe 100644 --- a/modules/reference/pages/feature/jwt/examples.adoc +++ b/modules/reference/pages/feature/jwt/examples.adoc @@ -27,7 +27,7 @@ You can reconfigure these defaults by specifying a `jwtConsumer` element with an For JWT tokens that are signed with RS256 and an X.509 certificate, configure the `trustStoreRef` and `trustAliasName` attributes to locate the signature verification key. -. Import the JWT issuer's X.509 certificate into the truststore. +. Import the JWT issuer's X.509 certificate into the truststore. . In the `jwtConsumer` element, specify the truststore ID and the certificate alias. [source, xml] @@ -59,3 +59,7 @@ com.ibm.websphere.security.jwt.JwtConsumer jwtConsumer = JwtConsumer.create("jwt ---- JwtToken jwtToken = jwtConsumer.createJwt("Base64_encoded_JWT_token>"); ---- + +== Sign and verify JWTs with JSON Web Keys (JWK) + +You can configure Open Liberty to use JWKs to sign the JWTs it builds and to verify the JWTs it consumes. For more information, see xref:ROOT:json-web-token.adoc[Sign and verify JSON Web Tokens with JSON Web Keys].