...
When the key is registered and the service agreement is approved the client system can get access tokens for KLG by following the procedure described in the following sections.
| Note |
|---|
Notice: Clients must give notice at least two weeks in advance for registration of new public keys in KLG. |
JWT Client Authentication
...
See example of using a tool for the calculation on https://github.com/trifork/klg-docs/issues/13
Given er PEM file, the following commands can be used to calculate the kid
| Code Block | ||
|---|---|---|
| ||
openssl x509 -in cert.pem -pubkey -noout | sed -e '/----.*PUBLIC KEY----\|^[[:space:]]*$/d' | tr -d '\n' | base64 -d | sha256sum -b | tr -d ' *-' | xxd -r -p | base64 | tr '/+' '_-' | tr -d '=' |
Requesting Access token with Token Exchange
...