Michael Schurter d14362ec19 core: add jwks rpc and http api (#18035) ...

Add JWKS endpoint to HTTP API for exposing the root public signing keys used for signing workload identity JWTs.

Part 1 of N components as part of making workload identities consumable by third party services such as Consul and Vault. Identity attenuation (audience) and expiration (+renewal) are necessary to securely use workload identities with 3rd parties, so this merge does not yet document this endpoint.

---------

Co-authored-by: Tim Gross <tgross@hashicorp.com>

2023-07-27 11:27:17 -07:00

38 KiB

Raw Blame History

View Raw