Documentation
¶
Overview ¶
Package jwks provides JWKS key resolution for JWT signature validation. It fetches RSA public keys from a JWKS endpoint, caches them by kid, and exposes a jwt.Keyfunc for use with the JWT middleware and auth clients.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
Types ¶
type Option ¶
type Option func(*Resolver)
Option configures a Resolver.
func WithHTTPClient ¶
WithHTTPClient sets the HTTP client used for JWKS fetches.
type Resolver ¶
type Resolver struct {
// contains filtered or unexported fields
}
Resolver fetches and caches JWKS RSA keys by kid.
func New ¶
New creates a Resolver for a direct JWKS URL (e.g. https://host/.well-known/jwks.json).
func NewWithDiscovery ¶
NewWithDiscovery creates a Resolver that first fetches the OIDC discovery document to locate the jwks_uri. issuer is e.g. https://host/.
Click to show internal directories.
Click to hide internal directories.