dchahla/jwks

Go implementation of npm's jwks-rsa -> A lightweight, OAuth2.0 module for verifying firebase issued ID tokens (no keys required, compatible with mux router)

What?

Go implementation of jwks-rsa

How does it work?

• Pulls modulus
• Creates []Public Keys
• Verifies tokens based Audience and []Public Keys

Why?

• Same reason the node one exists. The Firebase Admin SDK is clunky just for verifying tokens. Also, versioning becomes a pain.

Basic Example

import (
	...
	"github.com/dchahla/jwks"
  	"github.com/gorilla/mux"
	"github.com/joho/godotenv"
	"github.com/rs/cors"

)

router := mux.NewRouter()
router.Use(cors.New(cors.Options{
	AllowedHeaders: []string{"Authorization", "Content-Type"},
}).Handler)

//  define audience (string)
AUDIENCE := os.Getenv("AUDIENCE")

//  cache public keys
keys := jwks.InitKeySet() 

//  set up middleware to use audience and keys
middleware := jwks.Verify(AUDIENCE, "RS256", &keys)

//  release the hounds! (apply the middleware.)
router.PathPrefix("/api/v1/app/delegation/groups").Handler(middleware(http.HandlerFunc(getGroupsHandler)))