search

pilcrowonpaper / oslo

A collection of auth-related utilities
https://oslo.js.org
MIT License
1.06k stars 35 forks source link

Support for JWKS? #39

Open jasonkuhrt opened 8 months ago

jasonkuhrt commented 8 months ago

I'm interested in support for JWKS. To me that means:

  1. Create a public/private key set
  2. Sign JWKs with private key
  3. Verify JWKs with a public key

In the past I have typically used https://mkjwk.org but I would much prefer a holistic solution from this great library. Thanks!

RichiCoder1 commented 8 months ago

Endorse! I don't touch JWTs these days unless there is a JWKs involved. Makes things like secret rotation and aggregation so much simpler and is pretty standard for OIDC implementations.