How to create plain unsecured JWT token in apigee

[UmangSrivastava]

How can we make unsecured JWT token where algorithm is none. I tried using inbuilt Policies but they do not accept none in algorithm fields. Is it possible to use any third party library like nimbus jose in javascript to get desired unsecured jwt token

[API-Evangelist]

I would recommend consulting with your security team to discuss the decision to generate unsecured JWT tokens. In my opinion, this practice carries significant security risks and should be carefully considered.

[dchiesa1]

---

@UmangSrivastava wrote:

How can we make unsecured JWT token where algorithm is none. I tried using inbuilt Policies but they do not accept none in algorithm fields. Is it possible to use any third party library like nimbus jose in javascript to get desired unsecured jwt token

---

None of the builtin policies in APigee support the Algorithm of 'None' for JWT.  

It is possible for you to use 3rd-party libraries or just string concatenation to generate a JWT with alg="none".  

What reason do you have for doing this?  WHY do you want a JWT with alg=none ?