{"repo":"entur/jwt-resource-server","free":true,"listed":false,"github":"https://github.com/entur/jwt-resource-server","clone":"git clone https://github.com/entur/jwt-resource-server.git","description":"OpenID: Client, server and unit-testing support for machine-to-machine calls using access-tokens.","language":"Java","stars":50,"topics":["spring-boot","json-web-token","openid-connect","java","junit5","openid","jwt","caching","auth0"],"license":"EUPL-1.2","category":"auth-billing-email","readme_excerpt":"jwt-resource-server Tools for synchronous (servlet-based) OpenID resource servers relying on use of Access Tokens) for authorization. These come in the form of JSON Web Tokens (JWT) issued by Authorization Servers like Auth0 and Keycloak. Authorization Servers sign JWTs with private keys, resource servers then download the corresponding public keys from the Authorization Servers and validate the JWTs by verifying the signature. Primer Technically, this library deals with HTTP requests using the Authorization header. Example HTTP request: where the Base64-encoded value is the token itself. For a valid token, the server could process the request and respond: Alternatively, the server might return HTTP 401 Unauthorized if the token was not accepted, or HTTP 403 Forbidden if the token did not contain the enough permissions. Overview Users of this library will benefit from: Robust multi-tenant JWT access-token validation Robust JWT access-token client Flexible JWT JUnit 5 test-support Spring Boot support for the above In order to keep complexity (and risk) down, the library wraps existing third party libraries for low-level parsing, signature validation and authorization enforcement. Notable features: thread-safe sharing of keys (for signature verification) and access-tokens within each JVM proactive background refresh of keys and tokens keys and token health status (on last remote invocation) annotation-based token mocking with test method signature argument support open/closed e","default_branch":null,"files":null,"tree":[],"storefront":"/r/entur","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/entur/jwt-resource-server/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}