API Management service JWT Validation ECDSA using P-521 curve and SHA-512

Question

Hi Team,

I want to add the JWT validation to the API management.

we have our own Oauth System which will generate the token.

Elliptic Curve encryption (ECDSA) JWT validation configuration how to do.

Answer 1

Hey there Hanumant Sidraya

Thats a good question and thanks for using QandA platform.

Yes its possible You can start with generating an ECDSA key pair using OpenSSL or any other suitable tool that supports generating ECDSA keys with the P-521 curve.

For eg, you can use OpenSSL with the following command:

openssl ecparam -name secp521r1 -genkey -noout -

Once you have generated the public key (public.pem), register it with your OAuth system or identity provider.

now configure API Management Service, byy

• Log in to the Azure portal and navigate to your API Management instance.
• Select the API where you want to apply JWT validation.
• Under the API management instance, go to the "Security" section.
• Choose "JWT" as the authentication type.
• Configure the JWT validation policy to specify the ECDSA algorithm, curve, and hashing algorithm.
• Upload or provide the public key (public.pem) that was registered with your OAuth system.
• Save the changes.

If this helps kindly accept the answer thanks much.

Answer 2

Hi Azar,

API Management Service, I am not finding a security option.

In the Inbound Processing Plocies, I am trying the JWT validation.

You have any sample validate-jwt Plocie snippet for the ECDSA Please share for the reference.