temporalio / temporalio/temporal
Allow static JWKS for `jwtKeyProvider`
Open
@dnr is already working on this.
Since Sep 29, 2023.
enhancement
- Dominant language
- Go
- Stars
- 23.2k
- Forks
- 1.9k
- Avg merge
- 2d 8h
- Merged PRs (30d)
- 228
Description
Is your feature request related to a problem? Please describe.
In our internal setup, temporal is isolated and cannot reach out to our externally hosted IDP and get the keys necessary for authz.
Describe the solution you'd like
Add a jwkStaticKeySource string that can contain the keys and would be equal to the response of the JWKS endpoint. jwkStaticKeySource could/should be loaded via dynamic config as well so that key rotation can be implemented easily
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.