Allow using multiple keys and selecting between them via kid

haproxytech / haproxy-lua-oauth

JWT Validation implementation for HAProxy Lua host

Apache License 2.0

105 stars 50 forks source link

Allow using multiple keys and selecting between them via kid #40

Open kfirg-cetu opened 2 months ago

kfirg-cetu commented 2 months ago

JWT contains a mechanism for selecting the correct key by using an identifier. This commit adds an ability to use a different key based on the parameter in the JWT to verify.

To make sure that the change doesn't introduce any issues a new test script was added to run some sanity tests.

lnksz commented 1 month ago

maybe better added (didn't check whether it's already there) in the mainline/integrated C JWT code:

https://github.com/haproxy/haproxy/blob/master/src/jwt.c