Improved: Document how to store the JWT secret key
Adds a link to
@@ -74,7 +74,7 @@ Note: if you want to use a pair of public/private keys you might want to conside
* https://cryptosense.com/blog/mighty-aphrodite-dark-secrets-of-the-java-keystore/
* https://neilmadden.blog/2017/11/17/java-keystores-the-gory-details/
-Also remember that like everything a https://www.sjoerdlangkemper.nl/2016/09/28/attacking-jwt-authentication/[JWT can be attacked] and, though not used or tried in OFBiz yet, https://github.com/auth0/java-jwt#using-a-keyprovider[a good way is to mitigate an attack by using a KeyProvider]
+Also remember that like everything a https://www.sjoerdlangkemper.nl/2016/09/28/attacking-jwt-authentication/[JWT can be attacked] and, though not used or tried in OFBiz yet, https://github.com/auth0/java-jwt#using-a-keyprovider[a good way is to mitigate an attack by using a KeyProvider]. I have created https://issues.apache.org/jira/browse/OFBIZ-11187[OFBIZ-11187] for that.
===== Properties
