Dual-Certificate KID Support

department-of-veterans-affairs / va.gov-team

Public resources for building on and in support of VA.gov. Visit complete Knowledge Hub:

283 stars 204 forks source link

Closed bramleyjl closed 1 year ago

bramleyjl commented 1 year ago

What details are necessary for understanding the specific work or request tracked by this issue?

[ ] take ID.me kid obtained through ID.me service user_info method & use it to prioritize valid ID.me certificates based on kid
- JWT.decode decrypted_jwe, nil, false
[ ] investigate passing kid for preferred SiS token provided to client
- investigate ruby JWT library native support for kid

bramleyjl commented 1 year ago

Selection of KID is already handled in the JWT library we import; more information in the linked PR.

joeniquette commented 1 year ago

this was more of a research ticket rather than delivered work