If you are a SaaS product with SDKs that offer user authentication features (ie. allowing your customers to supply signed user JWTs to API requests), please also think about key material lifecycles and treat security as a firstclass citizen in your product. I don’t want to be forced to copy and paste my public keys into your UI manually. That’s not necessary, error prone and renders scheduled key rotations nearly impossible. JWKs are a great alternative! Thanks.

#jwt #jwk #authentication

jwx v3.0.0 is out! #golang #jwt #jwk #jws #jwe

https://github.com/lestrrat-go/jwx/discussions/1335

Have a look at Zalando‘s latest engineering blog where I talk about how we automated cryptographic key rotation for our customer identity provider using JWKs.

#OIDC #Identity #JWK

https://engineering.zalando.com/posts/2025/01/automated-json-web-key-rotation.html

In The End | Wojska Specjalne | Polish SOF | JWK | GROM | AGAT
https://youtu.be/sjHIikig-Ko?si=P_eb1Hhu2SfWg-Pz

#polska #JWK #grom #agat #PolishSOF