I am implementing PSUOAuth2 for OpenBank Apigee - DevPortal (Drupal-8). In creation of JSON Web Signature, few arguments are unclear to me. (Check out specification here). First is the private key, can I use any general private key or is there a specific private key to be used. (I checked in Apigee Interface, there is possibility to download a Public Key Certificate but no private key as they are never distributed). Second in JOSE Header Object to be constructed there is a parameter called kid (described as ''certificate id" in specification).
Asked
Active
Viewed 45 times
