yaytay/jwt-validator-vertx

A simple library to validate JWTs, using vertx-web-client for Open ID Discovery.

jwt-validator-vertx's Issues

Add support for AWS ALB x-amzn-oidc-data

Services behind an ALB that uses OIDC (https://docs.aws.amazon.com/elasticloadbalancing/latest/application/listener-authenticate-users.html) can received authentication data in three headers (https://docs.aws.amazon.com/elasticloadbalancing/latest/application/listener-authenticate-users.html#user-claims-encoding).
The access token may not be a JWT and thus cannot be universally trusted.
The user claims are presented as a JWT, but unfortunately the JWK is not presented by a standard JWKS URL.

Instead the key (just the key, not a JWK) is found at:

https://public-keys.auth.elb.<region>.amazonaws.com/<key-id>