Would like to package results of and OAuth /introspect (rfc7662) call into JWT token. Creating the token is not the issue.
But how to publish public keys as JSON Web Key set (jwks_uri)?
And automatically rotate the keys in the key set? Ideally generating new key pairs in Apigee itself.
In the Apigee Istio adapter, I do find some code for generating a JWKS. It uses javascript library "jsrsasign" (from Yahoo). Is this the approach to copy? But key rotation is manual in the Istio adapter, keypair must be generated outside Apigee. And number of keys is fixed to 2.
Looking forward to your feedback!
LinkedIn
Twitter
