JWT Account
The JWT Account holds the issuer, token lifetime, and signing key that an Outbound JWT rule uses to sign the token it sends to the upstream service. To create the account in the Policy builder, refer to Create an account in the Policy builder.
| Field/Field set | Description |
|---|---|
| Label | Required. Specify a unique label for the account. |
| JWT issuer | Required. Specify the issuer that the rule puts in the token's
iss claim. To enter an expression, click = next to the
field. |
| Token TTL (seconds) | Required. Specify how long, in seconds, the token stays
valid. Minimum value: 60 Default value: 3600 |
| Secret type | Select how the account stores the signing key:
Default value: KeyStore |
| KeyStore | Appears when Secret type is KeyStore. Specify the location of the keystore file. The file can be in a SnapLogic project (SLDB), on the Snaplex node, or at an unauthenticated web location such as an HTTPS URL. To enter an expression, click = next to the field.Example: keystore.jks |
| KeyStore password | Appears when Secret type is KeyStore. Specify the password for the keystore. If the key for the alias has its own password, it must match this password. |
| Key alias | Appears when Secret type is KeyStore. Specify the alias of the key that signs the token.Example: mykeyalias |
| Secret key | Appears when Secret type is Secret Key. Specify the secret key that generates the token's digital signature. To enter an expression, click = next to the field. |
| Description | Optionally, describe the account. |