Chapter 4
- JWT stands for JSON web token, a proposed standard that can be used to represent and securely exchange claims between two parties.
- To verify a JWT signature, we’ll need the public key.
- To generate a JWT in Quarkus, you can use the SmallRye JWT build dependency.
- Yes, we need to store a copy of the configured keys; however, the configuration for the path where these keys are stored can be overridden at runtime.
- We can use the
@ConfigProperty
annotation to retrieve a configuration value in Quarkus. - If the
@RolesAllowed
annotation is applied both at a class level and then in a specific method, the method annotation takes precedence over the other.