How to use

RsaSigner

in

leap.core.security.token.jwt

@Override
protected byte[] signToBytes(String payload) {
  return sign(rsaAlgorithm,privateKey,payload);
}

public void configure() {
  if(!endpoints.isEmpty()) {
    endpoints.forEach(r -> app.routes().remove(r));
  }
  Map<String, Object> map = ConfigUtils.extractMap(app.config(), CONF_PREFIX);
  if(null == map || map.isEmpty()) {
    return;
  }
  config = Converts.convert(map, OAuth2ServerConfig.class);
  if(!config.isEnabled()) {
    return;
  }
  //clients
  config.getClients().forEach((id, c) -> {
    c.setId(id);
    validator.validate(CONF_PREFIX + ".clients." + id, c);
  });
  //url
  int port = app.config().getIntProperty("server.port", 8080);
  String contextPath = app.config().getProperty("server.context-path", "");
  this.url = (config.isSsl() ? "https:" : "http") + "://localhost:" + port + contextPath;
  //gen key pair
  if(null == keyPair) {
    keyPair  = RSA.generateKeyPair();
    signer   = new RsaSigner(keyPair.getPrivateKey());
    verifier = new RsaVerifier(keyPair.getPublicKey());
  }
  //create endpoint
  createEndpoints(app.routes());
}

protected String generateToken(Request request, OAuth2Client client, int expires, boolean includeNonce) {
  Map<String, Object> claims = new LinkedHashMap<>();
  claims.put(JWT.CLAIM_AUDIENCE,        client.getId());
  claims.put(JWT.CLAIM_EXPIRATION_TIME, System.currentTimeMillis()/1000L + expires);
  if(includeNonce) {
    String nonce = request.getParameter("nonce");
    if (!Strings.isEmpty(nonce)) {
      claims.put("nonce", nonce);
    }
  }
  return signer.sign(claims, config.getExpires());
}