Get Signed JWT

A system task that allows signing a JWT token.

Definitions

   {
     "name": "get_signed_jwt",
     "taskReferenceName": "get_signed_jwt_ref",
     "inputParameters": {
       "subject": "${workflow.input.subject}",
       "issuer": "${workflow.input.issuer}",
       "privateKey": "${workflow.secrets.jwt-privatekey}",
       "privateKeyId": "key-123",
       "audience": "${workflow.input.audience}",
       "ttlInSecond": 3600,
       "scopes": "${workflow.input.scope}",
       "algorithm": "RS256"
     },
     "type": "GET_SIGNED_JWT"
   }

Input Parameters

Attribute	Description
subject	The subject of the JWT. Often represents the entity (e.g., user or service) for which the token is issued.
issuer	The issuer of the JWT, identifying who created and signed the token.
privateKey	The private key used to sign the JWT.
privateKeyId	An identifier for the private key used to sign the JWT.
audience	The intended recipient(s) of the JWT.
ttlInSeconds	The time-to-live (TTL) or expiration time of the JWT, specified in seconds.
scopes	The scopes associated with the JWT. It defines the access permissions for the token grants. It can be string or array.
algorithm	The signing algorithm to use for the JWT. Currently, it's set to RS256, which refers to the RSA signature with the SHA-256 hash algorithm.
cacheConfig	Enabling this option allows saving the cache output of the task. On enabling, you can provide the following parameters: ttlInSecond - Provide the time to live in seconds. You can also pass this parameter as a variable. key - Provide the cache key, which is a string with parameter substitution based on the task input. You can also pass this parameter as a variable.
optional	Enabling this option renders the task optional. The workflow continues unaffected by the task's outcome, whether it fails or remains incomplete.

Examples

UI

1. Add task type Get Signed JWT.
2. Configure the input parameters.

JSON

   {
     "name": "get_signed_jwt",
     "taskReferenceName": "get_signed_jwt_ref",
     "inputParameters": {
       "subject": "${workflow.input.subject}",
       "issuer": "${workflow.input.issuer}",
       "privateKey": "${workflow.secrets.jwt-privatekey}",
       "privateKeyId": "key-123",
       "audience": "${workflow.input.audience}",
       "ttlInSecond": 3600,
       "scopes": "${workflow.input.scope}",
       "algorithm": "RS256"
     },
     "type": "GET_SIGNED_JWT"
   }