Authenticating with Firebase token is impossible the secret changes dynamically about buddy-auth HOT 1 CLOSED

Hello, I'm going to close this issue, as I found a workaround that would combine this library with charmander without needing to change any library. Here there is the code that I used. The trick was to change the backend, from Signed JWT backends/jwsto backends/token. That way, the backend doesn't try to verify the signature itself, but gives the opportunity to add a function to the the authentication:

(defn my-authfn
  [request token]
  (log/trace
   (second
    (re-find (re-pattern (str "^" "Token" " (.+)$"))
             (http/-get-header request "authorization"))))
  (log/trace (:uid (charm/validate-token "<YOUR-PROJECT-HERE>" token)))
  (:uid (charm/validate-token "<YOUR-PROJECT-HERE>" token)))

(def backend
  (backends/token
   {:authfn my-authfn}))

In case it could help anybody, do not use https://github.com/magnetcoop/buddy-auth.jwt-oidc library: It might seem that it works, as it allows you to add a URI where to download a JWKS file but firebase's https://www.googleapis.com/robot/v1/metadata/x509/[email protected] file is not in that format. It took me a lot of time and debug to find out why it wasn't working, but at least it gave me the clue on how to get to this workaround that is actually working.

from buddy-auth.