jwks-federation-server

A simple HTTP service which serves a JWKS endpoint returning public keys which are fetched from multiple upstream sources.

Usage

Create a config file named config.yaml based on the sample config.sample.yaml file. Next, update upstream_jwks_urls and optionally limit the keys which gets import by defining allowed_kids.

# start container
podman run -d -p 8080:8080 -v $PWD/config.yaml:/config.yaml:ro ghcr.io/nimbolus/jwks-federation-server
# sample request
curl localhost:8080/.well-known/jwks.json

Alternatively all configuration options can be set via environment variables by using the prefix JWKS_FEDERATION, e.g. JWKS_FEDERATION_LISTEN_ADDR=":8080".