apache / apache/apisix

feat request(jwt-auth plugin): support fetch public key from jwks endpoint

Open
#12,791 4 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Lua
Stars
17.1k
Forks
2.9k
Avg merge
3d 16h
Merged PRs (30d)
63

Description

### Description

Now in jwt-auth plugin configuration, the public key is a static string.
But in some scenarios, the public key may change over time, for example, it's exposed by a service's jwks endpoint.

It would be great to support such use cases.

Contributor guide

Open the contributing guide

Research direction

Start by locating the jwt-auth plugin configuration and key-validation entry points, then inspect any existing plugin tests. Trace how the static public key is loaded and used, and define completion around accepting a JWKS endpoint and validating keys that can change over time.

Written by the indexing model from the issue text.

Assessment

Tech stack
lua
Domain
api, authentication
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.