Stream: cds hooks
Topic: Sandbox JWT public key
Kevin Shekleton (Nov 09 2017 at 21:06):
For anyone interested, here is the public JWT key for the Sandbox: https://github.com/cds-hooks/sandbox/blob/master/ecpublickey.pem
Travis Cummings (Jan 25 2018 at 22:31):
@Kevin Shekleton @Zach Plata I'm trying to validate the JWT from the cds-hooks sandbox using the key above. I think I need to know the algorithm used for the key in order to validate the signature. Is that correct? If so, what algorithm is associated with this key?
Zach Plata (Jan 25 2018 at 22:32):
@Travis Cummings The algorithm used was ES256
Kevin Shekleton (Jan 26 2018 at 16:33):
Btw, another reason reason why I think we can't leave details about the public key out of 1.0 :-)
Travis Cummings (Jan 26 2018 at 18:34):
I'm not an expert with security by any means, but as it is, there needs to be a lot of behind the scenes communication with a service provider and an EHR to be able to consume the signed JWT.
Kevin Shekleton (Jan 26 2018 at 18:34):
Yeah, that's why I now think we definitely need to formalize this for 1.0
Kevin Shekleton (Jan 26 2018 at 18:34):
I'll be writing up my thoughts on #87 regarding this today
Travis Cummings (Jan 27 2018 at 06:49):
When I try to use the public key from the GIT repo, I keep getting an "invalid key format" error. Any ideas? I've tried several java libraries.
Zach Plata (Jan 27 2018 at 13:27):
@Travis Cummings Are you using this link: https://raw.githubusercontent.com/cds-hooks/sandbox/master/ecpublickey.pem? The link Kevin posted a few posts up back in November is just the link to the file on Github.
Dan Arteaga (Mar 24 2020 at 00:52):
Is there a more recent public key available for the CDS Hooks Sandbox (http://sandbox.cds-hooks.org/)? I tried the jwk key posted here: https://igneous-cds-hooks.herokuapp.com/.well-known/jwks.json from 2 years ago, but it does not appear to be working.
Josh Mandel (Mar 24 2020 at 01:37):
https://github.com/cds-hooks/sandbox/tree/master/keys
Dennis Patterson (Mar 27 2020 at 16:17):
As far as the public url for your CDS Service, use http://sandbox.cds-hooks.org/.well-known/jwks.json
Last updated: Apr 12 2022 at 19:14 UTC
