Specifies the JWT signing algorithm used for Key Pair authentication with Snowflake. When left at its default, the provider automatically selects the algorithm based on the private key you supply.

Possible Values

Data Type

string

Default Value

"RS256"

Remarks

When AuthScheme is set to PrivateKey, the connector signs the JSON Web Token (JWT) it uses to authenticate to Snowflake with the algorithm specified here.

If you leave this property at its default value of RS256, the connector automatically selects the signing algorithm that matches the private key you supply:

• For an RSA private key, the connector uses RS256.
• For an ECDSA private key, the connector uses the ECDSA algorithm that matches the key's curve: P-256 selects ES256, P-384 selects ES384, and P-521 selects ES512.

To sign with a different algorithm, set this property explicitly. Any value other than RS256 overrides automatic selection and is used exactly as specified. Because automatic selection always chooses RS256 for an RSA key, you must set this property explicitly to RS384 or RS512 to sign an RSA-based token with either of those algorithms.

This property can take one of the following values: