JWK
It will be good to have an extension to the JWT utils to be able to decrypt a token using a JWK instead of a key as this is the normal case for many token providers. https://www.rfc-editor.org/rfc/rfc7517
Thanks for the input.
I will discuss this the group and find a solution.
The JWT is split to atoms in the current support. However JWK is a different animal
tor. 16. mar. 2023 kl. 22.19 skrev JuanmaAlcudia @.***>:
It will be good to have an extension to the JWT utils to be able to decrypt a token using a JWK instead of a key as this is the normal case for many token providers. https://www.rfc-editor.org/rfc/rfc7517
— Reply to this email directly, view it on GitHub https://github.com/sitemule/ILEastic/issues/117, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAVIPHQWV2H6QV4PGVGMCH3W4MVPTANCNFSM6AAAAAAV5LOK5E . You are receiving this because you are subscribed to this thread.Message ID: @.***>
JWKS support is added part of latest changes. caller needs to implement procedure to hit your JWKS end point and retrieve the key.
To use a JWK(S) stream file for setting the JWT verifying options use the procedure il_jwt_addVerifyOptionsFromJwks, see https://github.com/sitemule/ILEastic/blob/master/plugins/jwt/jwtplugin.rpginc#L70 .