Conrad Ludgate 82e3f0ecba [proxy/authorize]: improve JWKS reliability (#9676) ...

While setting up some tests, I noticed that we didn't support keycloak.
They make use of encryption JWKs as well as signature ones. Our current
jwks crate does not support parsing encryption keys which caused the
entire jwk set to fail to parse. Switching to lazy parsing fixes this.

Also while setting up tests, I couldn't use localhost jwks server as we
require HTTPS and we were using webpki so it was impossible to add a
custom CA. Enabling native roots addresses this possibility.

I saw some of our current e2e tests against our custom JWKS in s3 were
taking a while to fetch. I've added a timeout + retries to address this.

2024-11-07 16:24:38 +00:00

..

src

use cargo-hakari to manage workspace_hack crate

2022-03-29 10:42:04 +03:00

.gitattributes

add missing files, update workspace hack

2022-04-14 20:41:21 +03:00

build.rs

add missing files, update workspace hack

2022-04-14 20:41:21 +03:00

Cargo.toml

[proxy/authorize]: improve JWKS reliability (#9676)

2024-11-07 16:24:38 +00:00