Missing Encryption Algorithm for encode json web token assertion

Products

• CA API Gateway

Issue/Introduction

Is there a way to make RSA-OAEP-512 available for the Gateways , why can I only encrypt using RSA-OAEP when RSA-OAEP-256 is supported by the Gateway? 

Environment

Release : 10.0

Resolution

First RSA-OAEP-512 is currently not supported and would be a enhancement request .

This one is also not documented in the RFC as a valid algorithm .

RSA-OAEP-256 is listed as optional at the time the assertion was created , you can enable this one by setting jwt.showAllAlgorithms = true as a gateway cluster Wide  property .

The caveat is that the hidden algorithms are uncertified and we did only limited testing.