Differences
This shows you the differences between two versions of the page.
| projects:member_portal:jwk [2025/10/06 15:51] – created samp20 | projects:member_portal:jwk [2025/10/07 23:49] (current) – samp20 | ||
|---|---|---|---|
| Line 3: | Line 3: | ||
| The OpenID specification requires a JWKs endpoint to list public keys that can verify ID tokens. | The OpenID specification requires a JWKs endpoint to list public keys that can verify ID tokens. | ||
| - | TODO: Expand this with how the keys should be generated/ | + | Current thinking is to store them in the filesystem either in PEM or JSON format. A Flask command can be created to rotate these on a schedule. These should be stored |
| + | |||
| + | We should support the EC and RSA algorithms (EC is preferred, RSA is still required by the spec). | ||