funcool / funcool/buddy-sign

Support for looking up public keys via OIDC discovery

Open
#53 19 comments 0 reactions 0 assignees View on GitHub
Dominant language
Clojure
Stars
135
Forks
46
PR merge metrics
No merged PRs in 30d

Description

When using auth0 / google / etc... you can obtain public keys to assist with verifying JWTs via `.well-known` endpoints.

The domain for the endpoints can be deduced from the JWT `:iss` property and a map of the `.well-known` paths for commonly used authentication providers (or provided by the client).

Are you considering support for this?

I have a rudimentary implementation so can create a PR if there is interest.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.