ToastShaman/dropwizard-auth-jwt

Not thread-safe

drallgood opened this issue · 0 comments

The crypto libraries are not thread-safe.

Thus, it's not recommended to create a HMAC verifier/signer as singleton.
We need to either:

  • update the documentation to make sure people understand that this is happening
  • Make the HMAC classes (HmacVerifier, HmacSigner, KeyAware) thread-safe