Need crypto.createVerify for Cognito RS256 JWT token validation

Open kennu opened this issue 1 year ago • 1 comments

AWS Cognito uses RS256 for JWT tokens. This format is supported e.g. by API Gateway HTTP JWT Authorizers. To verify those JWT tokens in our own code, we would need crypto.createVerify RSA-SHA256 support in LLRT.

Even nicer would be for jsonwebtoken to work out-of-the-box in LLRT, but I believe crypto.createVerify is the minimum required functionality.

Feb 27 '24 01:02 kennu

This is prioritized! We'll add it so stay tuned. Also mentioned here: https://github.com/awslabs/llrt/issues/184

Mar 05 '24 12:03 richarddavison

Closing as being tracked by https://github.com/awslabs/llrt/issues/184

Mar 13 '24 18:03 richarddavison