Allow a JWT signing public key to be held in .PEM format on disk to be used to validate the token
@Joe-Winchester is already working on this.
Since Jul 9, 2025.
- Dominant language
- Java
- Stars
- 92
- Forks
- 81
- Avg merge
- 1d 9h
- Merged PRs (30d)
- 46
Description
Is your feature request related to a problem? Please describe.
The current codepath of ZAAS is to validate the JWT by using the iss public JWKS URL together with the kid.
We have an OIDC token where we'd like to keep the .pem for the public key on disk in the Zowe install directory, and have the check done against that without an outbound URL call.
Describe the solution you'd like
Change the zowe.yaml oidc section to allow the .pem path to be introduced, together with the associated code changes at OIDCTokenProviderJWK
Willingness to help
We are happy to contribute a PR with the change, following discussion on how to modify the zowe.yaml together with associated doc PRs.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.