You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I have discussed this feature request with the community.
Describe the background of your feature request
Some systems use symmetric keys to sign JWTs. Even symmetric keys can be used by heimdall to verify the corresponding mac, the only currently supported way to get such keys is via an JWKS endpoint. Obviously, exposing symmetric keys via an endpoint is a bad idea.
Describe your idea
Allow heimdall to fetch JWK documents not only from endpoints, but also from the local file system.
Are there any workarounds or alternatives?
No
Version
v0.7.0-alpha
Additional Context
No response
The text was updated successfully, but these errors were encountered:
dadrus
changed the title
Support retriaval of JWKS from local file system
Support getting of JWKS from local file system
May 8, 2023
dadrus
changed the title
Support getting of JWKS from local file system
Support getting of JWKS from local file system for JWT verification purposes
Jun 8, 2023
Preflight checklist
Describe the background of your feature request
Some systems use symmetric keys to sign JWTs. Even symmetric keys can be used by heimdall to verify the corresponding mac, the only currently supported way to get such keys is via an JWKS endpoint. Obviously, exposing symmetric keys via an endpoint is a bad idea.
Describe your idea
Allow heimdall to fetch JWK documents not only from endpoints, but also from the local file system.
Are there any workarounds or alternatives?
No
Version
v0.7.0-alpha
Additional Context
No response
The text was updated successfully, but these errors were encountered: