feat: support for remote JWKS#112

Open

jmlow wants to merge 20 commits intoelysiajs:mainfrom

jmlow:support-typed-remoteJwks

Commits on Aug 29, 2025

Add strongly-typed support for remote JWKs that doesn't collide with existing 'secret' implementation
jmlow
committed
Clean up formatting
jmlow
committed
Improve collision handling between 'secret' and 'remoteJwks' for plugin security (Implemented from CodeRabbit feedback)
jmlow
committed
Fix error handling and 'key' assignment with optional 'secret'
jmlow
committed
Add explicit any for 'data' (causes build failure when absent)
jmlow
committed
Implement security railguards for asymmetric encryption; Clean up typing
jmlow
committed
Improve encryption algorithm handling; Strongly type jwtDecoration
jmlow
committed
Refactor remoteJwks configuration to remoteJwksUrl for cleaner seed; Address nitpicks
jmlow
committed
Revert remoteJwksUrl -> remoteJwks to keep plugin interface simpler for testing and internal implementation
jmlow
committed
Remove unnecessary 'remoteJwks!' assertion
jmlow
committed
Clarify documentation/types for remote verify-only config
jmlow
committed
Fix setIat logic issue
jmlow
committed
Set `iat=true` when missing default or specific config to pass tests as part of fix
jmlow
committed
Update test to account for conditional 'sign()' decoration
jmlow
committed
Allow disabling 'iat' when set to 'false'
jmlow
committed
Handle JWK with async 'sign()' and alg-aware key
jmlow
committed
Improve 'setIat' checking; Remove sensitive data from checksum
jmlow
committed
Generalize jwks to support local or remote (but still only asymmetric algs)
jmlow
committed
Add test for jwks and secret implementations co-existing in plugin
jmlow
committed
Revert conditional decorations & throw error in 'sign()' if missing 'secret'
jmlow
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

feat: support for remote JWKS#112

feat: support for remote JWKS#112
jmlow wants to merge 20 commits intoelysiajs:mainfrom
jmlow:support-typed-remoteJwks

Commits on Aug 29, 2025

Add strongly-typed support for remote JWKs that doesn't collide with existing 'secret' implementation

Clean up formatting

Improve collision handling between 'secret' and 'remoteJwks' for plugin security (Implemented from CodeRabbit feedback)

Fix error handling and 'key' assignment with optional 'secret'

Add explicit any for 'data' (causes build failure when absent)

Implement security railguards for asymmetric encryption; Clean up typing

Improve encryption algorithm handling; Strongly type jwtDecoration

Refactor remoteJwks configuration to remoteJwksUrl for cleaner seed; Address nitpicks

Revert remoteJwksUrl -> remoteJwks to keep plugin interface simpler for testing and internal implementation

Remove unnecessary 'remoteJwks!' assertion

Clarify documentation/types for remote verify-only config

Fix setIat logic issue

Set `iat=true` when missing default or specific config to pass tests as part of fix

Update test to account for conditional 'sign()' decoration

Allow disabling 'iat' when set to 'false'

Handle JWK with async 'sign()' and alg-aware key

Improve 'setIat' checking; Remove sensitive data from checksum

Generalize jwks to support local or remote (but still only asymmetric algs)

Add test for jwks and secret implementations co-existing in plugin

Revert conditional decorations & throw error in 'sign()' if missing 'secret'

Uh oh!

feat: support for remote JWKS#112jmlow wants to merge 20 commits intoelysiajs:mainelysiajs/elysia-jwt:mainfrom jmlow:support-typed-remoteJwksjmlow/elysia-jwt:support-typed-remoteJwksCopy head branch name to clipboard

Commits

Commits on Aug 29, 2025

feat: support for remote JWKS#112
jmlow wants to merge 20 commits intoelysiajs:mainfrom
jmlow:support-typed-remoteJwks