Piraveena Paralogarajah
1 min readFeb 15, 2020

--

Thanks for your response!

In private_key_jwt authentication, the Client sends a JWT assertion signed with its private key. Then the server will authenticate the client using the signature in the assertion and validates it with the client’s public key

In a normal TLS connection, only the server presents its certificate. In a mutual TLS connection, the client and server both exchange their public certificate. As a result, the server receives a client certificate and validate it.

--

--

Piraveena Paralogarajah
Piraveena Paralogarajah

Written by Piraveena Paralogarajah

Software Engineer @WSO2, CSE Undergraduate @ University of Moratuwa, Former Software Engineering Intern @ WSO2

No responses yet