Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Gateway JWKS Endpoint #12091

Merged
merged 6 commits into from
Jul 27, 2023
Merged

Add Gateway JWKS Endpoint #12091

merged 6 commits into from
Jul 27, 2023

Conversation

ashera96
Copy link
Contributor

Purpose

This PR introduces a JWKS endpoint to the Gateway. Also, a kid claim is added to the backend JWT header via a deployment.toml configuration. If the said config is set to true, backend JWT will include the kid claim. By default the config is set to true.

Use the following config under deployment.toml to toggle the kid claim addition to the backend JWT.

[apim.jwt]
use_kid_property = true

JWKS endpoint is exposed via the following URLs:

  • Super Tenant: https://<host>:8243/jwks
  • Tenant: https://<host>:8243/t/<tenant domain>/jwks

tgtshanika
tgtshanika previously approved these changes Jul 24, 2023
chamilaadhi
chamilaadhi previously approved these changes Jul 25, 2023
@ashera96 ashera96 merged commit 5058da0 into wso2:master Jul 27, 2023
2 of 6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Expose a JWKS Endpoint from the Gateway
3 participants