jwks/remote

Verification using a JSON Web Key Set (JWKS) available on an HTTP(S) URL

Interfaces

Interface	Description
ExportedJWKSCache	Shape of an externally persisted remote JWKS cache.
RemoteJWKSet	A key resolver created by createRemoteJWKSet.
RemoteJWKSetOptions	Remote JWKS resolver options.

Type Aliases

Type Alias	Description
FetchImplementation	Custom fetch function. Must return HTTP 200 with a JSON JWKS. See customFetch.
JWKSCacheInput	Values accepted by the jwksCache option.

Variables

Variable	Description
customFetch	Configures a custom fetch implementation for remote JWKS retrieval.
jwksCache	Symbol used to configure an externally persisted remote JWKS cache.

Functions

Function	Description
createRemoteJWKSet	Creates a resolver for a JSON Web Key Set available at an HTTP(S) URL. Fetches the JSON Web Key Set when the cache is missing or stale. An unmatched key triggers another fetch only when cooldownDuration has elapsed since the last successful fetch. Selection uses the header's "alg" and "kid" and respects the JWK's "use" and "key_ops". Exactly one key must match.