I have started to work with JJWT to handle JWT on my server application.
My JWT secret will be stored at resources folder and I will load the secret with Properties class.
The JJWT provides three methods to sign the JWT, one uses byte[], other uses String and the other uses Key:
JwtBuilder signWith(SignatureAlgorithm var1, byte[] var2);
JwtBuilder signWith(SignatureAlgorithm var1, String var2);
JwtBuilder signWith(SignatureAlgorithm var1, Key var2);
The question: Regarding security, charset and other things, there are someany recommendations of which one I should use?
For while, I stand with String, since Properties return a String.