How to set sign the request by RSA256? about saml HOT 2 CLOSED

I'm not really sure I understand the question, but I'm assuming you are talking about the samlsp middleware.

I think the reason RSA is that HS256 requires an arbitrary sequence of bytes, whereas RSA256 might have different requirements.

Note here that we use the private key of the service provider as a handy source of a secret, and though it might be an RSA private key, we aren't treating it like one, we're just treating it as some opaque secret bytes:

https://github.com/crewjam/saml/blob/master/samlsp/middleware.go#L141

I'm happy to discuss more and a possible PR.

Cheers,

Ross

from saml.

closing this issue because it is pretty old. In #63 there is a global not-quite-constant for the JWT signing method. This could be moved into the middleware if there is demand, but I'm not sure I see it right now. Feel free to reopen to discuss further.

from saml.