External JWT signer

Allow connections that have a JWT signed by a specified key.

warning

Expiration and issuer are not checked. Any JWT signed by a trusted key will be accepted regardless of its exp claim or iss field.

Type: connect

Variants:

Action	ID
allow	com.synadia.protect.builtins.v1.allow.external.jwt.signer.connect

Configuration

A list of public keys with their algorithm prefix:

activations:
  com.synadia.protect.builtins.v1.allow.external.jwt.signer.connect: true

configurations:
  com.synadia.protect.builtins.v1.allow.external.jwt.signer.connect:
    - 'RS256:MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA...'
    - 'ES256:MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE...'

Schema

{
  "type": "array",
  "items": {
    "type": "string"
  },
  "minItems": 1
}