search

go-chi / jwtauth

JWT authentication middleware for Go HTTP services
MIT License
541 stars 91 forks source link

Usage with Auth0 with ID Token #72

Open mschewe opened 2 years ago

mschewe commented 2 years ago

Hello,

I want to know if it is possible to use this library to verify an ID Token originating from Auth0. I only need the identity of the caller, the authorization is done inside the application.

The readme says I need to pass in a secret. However, I don't know what secret is meant. I have tried it with the "Client Secret". It will error with "token is unauthorized".

tokenAuth = jwtauth.New("HS256", []byte("my client secret"), nil)

Thank you very much for this package and for any help!

mschewe commented 2 years ago

For now, I have created my own middleware. I am using the JSON Web Key Set (JWKS). Please let me know if this is possible with jwtauth too?