Abstract Class: BaseOAuthJwksRoute<K>

Defined in: auth/src/routes/BaseOAuthJwksRoute.ts:24

Serves this authorization server's public JSON Web Key Set (RFC 7517) at whatever path a subclass mounts it to (conventionally /.well-known/jwks.json or /jwks.json), so relying parties and resource servers can verify the tokens this server issues without any prior key exchange. Kept as its own route class separate from BaseOAuthDiscoveryRoute since a JWKS endpoint is typically polled far more often than discovery metadata and may warrant independent caching/CDN treatment.

Extended by

• BaseOAuthJwksRouteMongo
• BaseOAuthJwksRouteSQL

Type Parameters

K

K extends SigningKey

Constructors

Constructor

new BaseOAuthJwksRoute<K>(): BaseOAuthJwksRoute<K>

Returns

BaseOAuthJwksRoute<K>

Properties

signingKeyClass

abstract protected signingKeyClass: any

Defined in: auth/src/routes/BaseOAuthJwksRoute.ts:25

---

signingKeyRepo?

protected optional signingKeyRepo?: RepoUtils<K>

Defined in: auth/src/routes/BaseOAuthJwksRoute.ts:30

---

signingKeyUtils?

protected optional signingKeyUtils?: SigningKeyUtils

Defined in: auth/src/routes/BaseOAuthJwksRoute.ts:32

Methods

jwks()

jwks(res): Promise<{ keys: any[]; }>

Defined in: auth/src/routes/BaseOAuthJwksRoute.ts:74

Returns this authorization server's public JSON Web Key Set. Never includes private key material — see SigningKeyUtils.getPublicJwks().

Parameters

res

HttpResponse

Returns

Promise<{ keys: any[]; }>