feat request(jwt-auth plugin): support fetch public key from jwks endpoint
Open
enhancement
- Dominant language
- Lua
- Stars
- 17.1k
- Forks
- 2.9k
- Avg merge
- 3d 16h
- Merged PRs (30d)
- 63
Description
### Description
Now in jwt-auth plugin configuration, the public key is a static string.
But in some scenarios, the public key may change over time, for example, it's exposed by a service's jwks endpoint.
It would be great to support such use cases.
Contributor guide
Research direction
Start by locating the jwt-auth plugin configuration and key-validation entry points, then inspect any existing plugin tests. Trace how the static public key is loaded and used, and define completion around accepting a JWKS endpoint and validating keys that can change over time.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- lua
- Domain
- api, authentication
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100