jwt_issuer

jwt_issuer

A simple tool for generating JWTs and JWKS files for testing api_server.api_auth.jwks without external JWT infrastructure.

Build

make build-jwt-issuer

Release

make release-jwt-issuer BUMP=patch   # or minor, major

Usage

# Generate with defaults (token.jwt + jwks.json)
./bin/jwt_issuer

# Custom issuer/audience/subject
./bin/jwt_issuer \
  -issuer "https://my-issuer.example.com" \
  -audience "https://apigw.example.com" \
  -subject "alice@example.com" \
  -eppn "alice@university.edu" \
  -expiry 24h

# Custom output files + export private key
./bin/jwt_issuer \
  -jwt-out my-token.jwt \
  -jwk-out my-jwks.json \
  -priv-out my-private.jwk

# Reuse an existing private key (avoids generating a new key each run)
./bin/jwt_issuer \
  -priv-in my-private.jwk

Flags

Example apigw config

Using the generated JWKS file directly (no URL needed):

api_server:
  api_auth:
    jwks:
      enable: true
      jwks_file_path: "/path/to/jwks.json"
      issuer: "https://jwt-issuer.example.com"
      audience: "https://apigw.example.com"

Testing a request

curl -H "Authorization: Bearer $(cat token.jwt)" https://apigw.example.com/api/v1/...