JWTAlgorithm
Specifies the JWT signing algorithm used for Key Pair authentication with Snowflake. When left at its default, the provider automatically selects the algorithm based on the private key you supply.
Possible Values
RS256, RS384, RS512, ES256, ES384, ES512Data Type
string
Default Value
"RS256"
Remarks
When AuthScheme is set to PrivateKey, the provider signs the JSON Web Token (JWT) it uses to authenticate to Snowflake with the algorithm specified here.
If you leave this property at its default value of RS256, the provider automatically selects the signing algorithm that matches the private key you supply:
- For an RSA private key, the provider uses RS256.
- For an ECDSA private key, the provider uses the ECDSA algorithm that matches the key's curve: P-256 selects ES256, P-384 selects ES384, and P-521 selects ES512.
To sign with a different algorithm, set this property explicitly. Any value other than RS256 overrides automatic selection and is used exactly as specified. Because automatic selection always chooses RS256 for an RSA key, you must set this property explicitly to RS384 or RS512 to sign an RSA-based token with either of those algorithms.
This property can take one of the following values:
| RS256, RS384, RS512 | RSA signature with SHA hashing (SHA-256, SHA-384, SHA-512) |
| ES256, ES384, ES512 | ECDSA signature with NIST curves (P-256, P-384, P-521) and SHA hashing (SHA-256, SHA-384, SHA-512) |