rahulreghunath opened a new issue, #8307:
URL: https://github.com/apache/apisix/issues/8307

   ### Description
   
   I am using google cloud identity platform for user management and 
authentication and I was trying configure apisix jwt-auth plugin to use with 
google authentication. Google use RS256 algorithm for authentication and they 
will provide public key under this 
[url](https://www.googleapis.com/robot/v1/metadata/x509/[email protected]).
 There will be two public keys at a time we need to check the kid part in the 
token header and based on that value we need to choose the public key. As per 
google doc, we need to refresh the public-key based on the the `max-age` value. 
   
   
![image](https://user-images.githubusercontent.com/28650610/201093920-8b890382-619d-4e4f-a3d6-088d2b8e0d3b.png)
   
   
   
![image](https://user-images.githubusercontent.com/28650610/201078069-1ec9b226-123d-4057-9bc8-3fb1a2593f45.png)
   
   What I tried is to create a python script which update the apisix 
configuration dynamically but got to know that we cannot use only one 
public-key at a time because both keys were used in different tokens.
   
   There is no default option in jwt-auth plugin to achieve this. 
   
   Please suggest any way to get this working with apisix and consider this as 
a new feature in upcoming versions
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to