importJWK does not work on unsecure domain #547

Answered by panva

krystianknowak asked this question in Q&A

krystianknowak
Jun 28, 2023

Hello,

I have a case when I need to use importJWK function outside secure domain, in the browser.
When I call importJWK in my app on localhost, or domain with https everything works as it should, but on unsecure domains which for me is just remote host without https importJWK throws an error

I found out that this is related to Web Crypto Api and that subtle property is not available on unsecure domains.
What I want to do is to importJWK on unsecure domain(or just read publicKey from it). Is there a way to omit using web crypto api in any way?
Code:

Answered by panva

Is there a way to omit using web crypto api in any way?

There is not, you need secure context. https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts

View full answer

Replies: 1 comment 1 reply

panva
Jun 28, 2023
Maintainer

Is there a way to omit using web crypto api in any way?

There is not, you need secure context. https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts

1 reply

krystianknowak Jun 28, 2023
Author

So, it would be possible only with different library which is not using WebCrypto api for jwt veryfication, yes?

Answer selected by panva

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment