Lets say my paylod is
X
Y
Z
Is it possible to create two distinct signatures for arbitrary payload selection? for example: signature for X, Y
and another for X, Z
then to encrypt the payload and two signatures to single JWT?
The JWT spec defines a concept called Nested JWTs that you can take a look at, although I’m not sure if that is exactly what you are looking for. See Appendix A.2 in RFC 7519. Nesting is not supported by most JWT implementations though, and Auth0 does not support this at this time either.
2 Likes
Thank you for your help on this one Thameera!