TeslaGov / ngx-http-auth-jwt-module

Secure your NGINX locations with JWT
MIT License
309 stars 118 forks source link

Installing additional public JSON Web Key (JWK) #58

Closed vorishirne closed 2 years ago

vorishirne commented 3 years ago

As i am the jwt signer, how can I add my JWK to the plugin.

fitzyjoe commented 2 years ago

This module currently does not support the JWK file type, however you can specify the public key as auth_jwt_key for HS256 or RS256. As of today, you also have the option specify the file to the public key in PEM:

auth_jwt_use_keyfile on; auth_jwt_keyfile_path "/etc/nginx/pub_key.pem";

Supporting the JWK spec would be a nice addition... especially to support a smooth key rotation. Do you have any ability to make a pull request, @Dhua-v ? Thanks.

vorishirne commented 2 years ago

I am not experienced in cpp. Thanks for explaining.