emqx-auth-jwt
emqx-auth-jwt copied to clipboard
Questions: Can this jwt plugin support multiple public keys?
Use scenario:
User have tens of thousand of device that will connected to the cloud through MQTT protocol. Each device will has it's unique key pare for authentication, The client will use the private key for create the JWT token.
Question: Then how can we configure the public keys for all of those devices?
@HJianBo @emqplus @turtleDeng
Hi Guys, Any suggestion for this questions?
JWT plugin doesn't support this for now.
Why not have a server generate a jwt token for each device with a single public key. That is how JWT is used everywhere else.
AWS Cognito and Auth0 both provide two public keys in their well-known JWK keysets. Would be useful to be able to index and use the appropriate public key based on the token's kid
claim.