Delay the decision of which secret to use about buddy-auth HOT 2 CLOSED

It is already implemented, just bump the buddy sign to 3.0.0 that uses the new IKeyProvider protocol: https://github.com/funcool/buddy-sign/blob/master/src/buddy/sign/util.clj#L30

By default right now if you pass a function as the secret, this function will be executed with a header as argument and you should return the correct key.

from buddy-auth.

I second @anler's suggestion. It would be really useful to be able to select the secret key validation time based on the incoming JWT header (e.g. key id). I think this is a fairly common use case. My use case specifically has to do with openid connect style authorization flows, where the identity server exposes a list of one or more JWKs (json web keys) and I need to select the key to use for signature validation based on the key id supplied in the JWT header.

Edit: Supporting a secret-function would of course not have to remove the possibility of supplying a key when creating the backend.

from buddy-auth.