Currently, the APEX_JWT
APIs only support the HS256 symmetric encryption algorithm for JWT claim signatures. This limits integration with many modern identity providers and enterprise systems that rely on asymmetric algorithms like RS256 for enhanced security and key management.
Request:
Please consider extending APEX_JWT
to support asymmetric encryption algorithms (such as RS256) for JWT signing and verification. This would align APEX with industry standards for secure authentication and enable easier integration with services like Azure AD, Google, Auth0, etc.