[JWT Policy] Retrieve kID from JWT Token

[OSMOSA44]

Bonjour,

As the kID can change, it would be preferable to get this parameter from the JWT Token hitself

What do you think about that ?

Thanks,

Regards,

[msavy]

Have a look at the Keycloak OAuth2 policy. Although it's primarily targeted at compatibility with Keycloak, their approach is very standards-based, so it usually works with all JWT providers.

If you need something more custom then feel free to contact me (look at my GH profile).

[destotelhorus]

https://github.com/apiman/apiman-plugins/pull/123 should implement this.