search

uruk-project / Jwt

JSON Web Token implementation for .Net & .Net Core
MIT License
81 stars 13 forks source link

Better support multiple issuers #507

Closed ycrumeyrolle closed 3 years ago

ycrumeyrolle commented 3 years ago

It may be common to have a lots of issuers for secevent. The current way to resolve this is to try to validate against each issuer policy.

A better way to achieve this is to lookup the issuer policy based on the 'iss' claim. This require to review the TokenValidationPolicy usage.

ycrumeyrolle commented 3 years ago

The TokenValidationPolicyBuilder will be updated for linking the issuer, the signing key and the signing algorithm. The signature validation has to be done after the retrieval of the issuer for getting the key ring.

ycrumeyrolle commented 3 years ago

Fixed in #509