[
https://issues.apache.org/jira/browse/KNOX-2570?focusedWorklogId=577808&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-577808
]
ASF GitHub Bot logged work on KNOX-2570:
----------------------------------------
Author: ASF GitHub Bot
Created on: 06/Apr/21 18:18
Start Date: 06/Apr/21 18:18
Worklog Time Spent: 10m
Work Description: moresandeep opened a new pull request #429:
URL: https://github.com/apache/knox/pull/429
## What changes were proposed in this pull request?
This PR adds support for JWKS endpoint that exposes the public key used to
sign the JWT tokens. The format used is the standard JWKS format.
This is an example of rest request
` curl -ku admin:admin-password
'https://localhost:8443/gateway/sandbox/knoxtoken/api/v1/.well-known/jwks.json`
and the response
```
{
"keys":[
{
"kty":"RSA",
"e":"AQAB",
"use":"sig",
"kid":"7T805L6i36S0U0mVcO\/WjuPD1TtNehUXjQa7uBdet34=",
"alg":"RS256",
"n":"t2muUKwV9Zx8Q3NWy5vhu_EszpBkfa8cZjhJpF8IHNkx2kbf8aeRTr3KwGInPYx6bVVD1eNzjDX_m5afyHfQr4O_PHSiaxtJPN16kmoVnxQW8ZxnT2GlMUY6TL2t79Ovrhnkig-4_rP5qH0ruZZJpNcly-FLKoMd23apy8BCe9lSaSIbWUVU5YrVzWzuO3TWILSQCoIS8-4j6G0JmzaOu4t3f0yATE7WaJbqW9UmEAyTDIlft0Xnh1Oz_UHWAe5LLVYyVh6Xr8lMUOBj1oAVAKLJrd0ZeKb-UerTKuCzuRM2yI-idXCZFaJQ3x4KklYihL6Qc7FPjRestPxIeBJl1w"
}
]
}
```
## How was this patch tested?
The patch was tested locally.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
Issue Time Tracking
-------------------
Worklog Id: (was: 577808)
Remaining Estimate: 0h
Time Spent: 10m
> Support for JWKS endpoint
> -------------------------
>
> Key: KNOX-2570
> URL: https://issues.apache.org/jira/browse/KNOX-2570
> Project: Apache Knox
> Issue Type: New Feature
> Components: Server
> Reporter: Sandeep More
> Assignee: Sandeep More
> Priority: Major
> Fix For: 1.6.0
>
> Time Spent: 10m
> Remaining Estimate: 0h
>
> With knox handing out tokens to other applications it would be nice to
> provide a JWKS endpoint to to verify tokens.
> It should be noted that this will work for tokens signed using asymmetric
> keys.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
