Use of Base64 for private keys

[akondasif]

Greetings,

We are researchers and we are looking for insecure coding patterns and configurations in the microservice architecture repositories. In your repository, we have found instances of BASE64 usage. CWE says "A programmer can attempt to remedy the password management problem by obscuring the password with an encoding function, such as base 64 encoding, but this effort does not adequately protect the password."

Hopefully, you agree and will fix it.

Source:

microservice/quarkus/src/test/java/com/github/chrisgleissner/microservice/quarkus/jwt/JwtTokenGenerator.java

Line 40 in db1d729

byte[] pemBytes = Base64.getDecoder().decode(privateKeyPem