Written by Jamie Tanna
on 
CC-BY-NC-SA-4.0 Apache-2.0
1 mins

JWKS-iCal Release v1.2.0: Determine the jwks_uri from Configuration

When I first announced the release of jwks-ical, a solution for Keeping Track of Certificate Expiry with a JWKS to iCalendar Converter, it was only possible provide the full jwks_uri.

However, it may be better to auto-detect the configuration from the authorization server.

With this release, now live, you can use a couple of new options.

We can now point the function to the OpenID Connect Discovery or the OAuth 2.0 Authorization Server Metadata endpoint:

https://europe-west1-jwksical-jvt-me.cloudfunctions.net/jwks-ical
  ?configuration_endpoint=https://jamietanna.eu.auth0.com/.well-known/openid-configuration

Alternatively, you can provide the top-level URI for the issuer of the service, at which point we'll attempt to discover the configuration via OpenID Connect Discovery:

https://europe-west1-jwksical-jvt-me.cloudfunctions.net/jwks-ical
  ?issuer=https://jamietanna.eu.auth0.com

Written by Jamie Tanna's profile image Jamie Tanna on , and last updated on .

Content for this article is shared under the terms of the Creative Commons Attribution Non Commercial Share Alike 4.0 International, and code is shared under the Apache License 2.0.

#jwks #certificates #jwks-ical #calendar.

This post was filed under articles.

Interactions with this post

Interactions with this post

Below you can find the interactions that this page has had using WebMention.

Have you written a response to this post? Let me know the URL:

Do you not have a website set up with WebMention capabilities? You can use Comment Parade.