{"repo":"matelang/jwt-go-aws-kms","free":true,"listed":false,"github":"https://github.com/matelang/jwt-go-aws-kms","clone":"git clone https://github.com/matelang/jwt-go-aws-kms.git","description":"AWS KMS adapter for https://github.com/golang-jwt/jwt GoLang Json Web Token(JWT) Library","language":"Go","stars":33,"topics":["jwt","golang","aws","kms"],"license":"MIT","category":"auth-billing-email","readme_excerpt":"AWS KMS adapter for golang-jwt/jwt-go library This library provides an AWS KMS(Key Management Service) adapter to be used with the popular GoLang JWT library golang-jwt/jwt-go. It will Sign a JWT token using an asymmetric key stored in AWS KMS. Verification can be done both using KMS Verify method or locally with a cached public key (default). Supported key types Signature Algorithm JWT alg Note --------------------------- ----------- ----------------------------------- ECC NIST P256 ES256 ECC NIST P384 ES384 ECC NIST P521 ES512 ECC SECG P256K1 - secp256k1 is not supported by JWT RSASSA PKCS1 V1 5 SHA 256 RS256 RSASSA PKCS1 V1 5 SHA 384 RS384 RSASSA PKCS1 V1 5 SHA 512 RS512 RSASSA PSS SHA 256 PS256 RSASSA PSS SHA 384 PS384 RSASSA PSS SHA 512 PS512 Usage example See example.go Public-key cache and KMS key rotation When verifyWithKMS=false (the default), the first verification call fetches the KMS key's public key via GetPublicKey and caches it in process memory. Subsequent verifications use the cached key and standard golang-jwt verification — no KMS calls. This is efficient for high-volume verification but has an important caveat: the cache has no TTL by default, so KMS-side key rotations are not picked up until the process restarts . For deployments where keys can rotate, either: 1. Enable a TTL on the cache (recommended for most cases): 2. Call jwtkms.ClearPubKeyCache() explicitly when you know a rotation has occurred (e.g. from a CloudWatch / EventBridge handler). 3. Or se","default_branch":null,"files":null,"tree":[],"storefront":"/r/matelang","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/matelang/jwt-go-aws-kms/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}