Missing Encryption Algorithm for encode json web token assertion

Products

• CA API Gateway

Issue/Introduction

Is there a way to make RSA-OAEP-512 available for the Gateways?  Why is only RSA-OAEP available and when will RSA-OAEP-256 be supported by the Gateway? 

Environment

API Gateway 10.0

Resolution

Currently, RSA-OAEP-512 is not supported and would be considered an enhancement request. Also, this is not documented in the RFC as a valid algorithm.

At the time the assertion was created, RSA-OAEP-256 was listed as optional. You can enable this by setting jwt.showAllAlgorithms = true as a gateway cluster-wide  property .

NOTE: The caveat is that the hidden algorithms are uncertified and Support has only performed limited testing.