How to use jwt authentication without username and password

[yhjhoo]

In the example of jwt authentication, it configures both client Id and client secret which I don't want.

Is there some similiar configuration like "security.oauth2.resource.jwt.key-uri" in spring-boot?

[jkonicki]

No, we don't have that option available in Steeltoe.

We do build Microsofts JWT provider, so it is possible they have another way to handle this.

[yhjhoo]

that's very bad news. Good to hear MS provide this thing. tks for the help

[jkonicki]

Hi @yhjhoo, It was not my original intention to close this ticket. So, I am going to reopen this as hopefully you or someone in the community would like to contribute something that would satisfy this request. This is currently not a team priority, but we are willing to assist in helping with a solution.

[TimHess]

This should be a function of the ASP.NET Core JWT auth library, I do not see anything for Steeltoe to do here