haskell-servant / haskell-servant/servant
Make JWKSettings signingKey optional
Open
- Dominant language
- Haskell
- Stars
- 2k
- Forks
- 427
- Avg merge
- 2d 23h
- Merged PRs (30d)
- 5
Description
For integration with external auth provider (e.g. Okta, Auth0, AWS Cognito) where JWTs only need to be verified and never signed, it would be useful if the `signingKey` field of `JWKSettings` was optional (e.g. `Maybe Jose.JWK`). For now, it seems like a workaround is to populate it with a dummy key.
Contributor guide
Assessment
This issue has not been assessed yet.