ktorio / ktorio/ktor

support multiple jwt issuers when validating

Open
#4,947 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
Kotlin
Stars
14.5k
Forks
1.3k
Avg merge
2d 13h
Merged PRs (30d)
49

Description

The underlying JWT library supports multiple issuers. See https://github.com/auth0/java-jwt/issues/246 and https://github.com/auth0/java-jwt/blob/ee7332b023719a9007be0caf5ef7608840fc4946/lib/src/main/java/com/auth0/jwt/interfaces/Verification.java#L27-L34.

It would be nice if that was used here and pushed up to be exposed to ktor users:

https://github.com/ktorio/ktor/blob/221f467c1184da87ae1bd57ce194970246fdd7ed/ktor-server/ktor-server-plugins/ktor-server-auth-jwt/jvm/src/io/ktor/server/auth/jwt/JWTUtils.kt#L74

Contributor guide

Open the contributing guide

Research direction

Start with JWTUtils.kt at the referenced validation code and compare it with Verification.java and auth0/java-jwt issue 246. Trace how issuer validation is configured for Ktor users; done means multiple JWT issuers can be supported through the exposed Ktor JWT authentication configuration.

Written by the indexing model from the issue text.

Assessment

Tech stack
java, kotlin
Domain
authentication
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
68/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.