-
Story
-
Resolution: Done
-
Normal
-
None
-
None
-
Quality / Stability / Reliability
-
False
-
-
False
-
None
-
Unset
-
None
-
-
-
- Create new /jwk endpoint in bop
- This endpoint will require a kid as input
- mbop example: https://github.com/RedHatInsights/mbop/blob/16835a13ace135bcc556f8a7cf66ccdf6032c9aa/internal/handlers/jwt_v1_handler.go#L23
- It will reach out to sso /certs endpoint: https://sso.stage.redhat.com/auth/realms/redhat-external/protocol/openid-connect/certs , this returns a list and we match on the kid
- Grab the x5c data from the matched object and convert to pem data
- https://www.npmjs.com/package/jwk-to-pem (or similar)
Return this pem data (base64 encoded, similar to https://sso.stage.redhat.com/auth/realms/redhat-external/ public_key)
Extra notes: https://docs.google.com/document/d/1_gDfjkwvuLAEMS0l1MKd-MMbr6BbeqVPxRYVOeOHSHM/edit?tab=t.lh7tyl8wi25t