search

G-Research / astral

Apache License 2.0
1 stars 4 forks source link

Implement JWKS support for OIDC providers using it #62

Closed GeorgeJahad closed 3 weeks ago

GeorgeJahad commented 1 month ago

ErickD mentioned an oidc provider used in our secure zone.

Investigate to see how to use it to decode jwt tokens

GeorgeJahad commented 1 month ago

Using the info we got from Erick D, I was able to generate a jwt and then validate it against the identityServer keys it was generated from. The trick is to use one of the public keys from the jwks endpoint provided by the Identityserver.

I had to do it in Python because our secure environment doesn't support ruby gems. I'm converting it to Ruby now.

This post showed me how to do it in Python: https://stackoverflow.com/questions/68891213/how-to-decode-jwt-token-with-jwk-in-python