Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Package JWK: if missing kid in jwks, then refresh JWKS #411

Merged
merged 22 commits into from
May 16, 2024

Conversation

techmanmike
Copy link

@techmanmike techmanmike commented May 1, 2024

Purpose:

To make key rotation & updates more automatic, if a kid is missing from the JWKS, then refresh the JWKS. This is all internal to the JWT package. No external changes required.

Changes:

  • removed the cache
  • Added jwkSet struct to manage lifecycle and access
  • cleaned up options and comments
  • added key rotation test

…#413) (#414)

Co-authored-by: cultureamp-renovate[bot] <89962466+cultureamp-renovate[bot]@users.noreply.github.com>
Co-authored-by: Self-hosted Renovate Bot <135776+cultureamp-renovate[bot]@users.noreply.github.com>
* removed error on Debug() Info() etc.

* removed unused func GetEnvBool

* now can create logger with start up properties and use extensions

* removed FromContext wip

* removed nolint errcheck on ld client

* added Child to Logger interface

* example using Child to inherit parent values

* added context helpers - unit tests still to come

* started tests for context helpers

* cleaned up tests and examples and made default fields appears inside properties

* put default/global properties in a 'default_properties' sub-doc so they don't overwrite normal properties

* updated README with logging examples
* updated to go 1.22.3 to close CVE-2024-24787 and CVE-2024-24788

* small update to the README to force snyk to pass the build

* Trigger Build
* minor updates to linters

* enabled all new linters by default and exclude only those we don't (yet) support

* added internal revive linter fixes - no breaking changes

* turned on ireturn linter

* reemoved ex exclude rule in favour of //nolint

* fixed some magic number lint errors

* fixed conflict and golint ireturns

* fixed all magic number lint warnings
* minor updates to linters

* enabled all new linters by default and exclude only those we don't (yet) support

* added internal revive linter fixes - no breaking changes

* turned on ireturn linter

* reemoved ex exclude rule in favour of //nolint

* fixed some magic number lint errors

* fixed conflict and golint ireturns

* fixed all magic number lint warnings
Copy link

Package Line Rate Health
github.com/cultureamp/ca-go/cipher 79%
github.com/cultureamp/ca-go/env 95%
github.com/cultureamp/ca-go/jwt 86%
github.com/cultureamp/ca-go/kafka/consumer 82%
github.com/cultureamp/ca-go/launchdarkly 71%
github.com/cultureamp/ca-go/launchdarkly/evaluationcontext 96%
github.com/cultureamp/ca-go/log 93%
github.com/cultureamp/ca-go/ref 100%
github.com/cultureamp/ca-go/request 100%
github.com/cultureamp/ca-go/secrets 41%
github.com/cultureamp/ca-go/sentry 99%
Summary 88% (1837 / 2089)

@techmanmike techmanmike marked this pull request as ready for review May 11, 2024 00:18
@techmanmike techmanmike merged commit 193a498 into main May 16, 2024
7 checks passed
@techmanmike techmanmike deleted the jwt-retrieve-on-missing-kid branch May 16, 2024 05:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants