13 lines
717 B
Bash
13 lines
717 B
Bash
# Auth signs short-lived overseas RS256 tokens with a private JWK Set.
|
|
OVERSEAS_JWT_ENABLED=true
|
|
OVERSEAS_JWT_ISSUER=auth-service
|
|
OVERSEAS_JWT_AUDIENCE=lastleg-api
|
|
OVERSEAS_JWT_CURRENT_KID=replace-with-current-signing-kid
|
|
OVERSEAS_ACCESS_TOKEN_TTL=15m
|
|
OVERSEAS_JWT_RSA_JWK_SET={"keys":[{"kty":"RSA","kid":"replace-with-current-signing-kid","use":"sig","alg":"RS256","n":"replace-with-modulus","e":"AQAB","d":"replace-with-private-exponent","p":"replace","q":"replace","dp":"replace","dq":"replace","qi":"replace"}]}
|
|
|
|
# Overseas services validate tokens against Auth's public JWKS endpoint.
|
|
JWT_JWK_SET_URI=https://replace-with-auth-host/api/auth/.well-known/jwks.json
|
|
JWT_ISSUER=auth-service
|
|
JWT_AUDIENCE=lastleg-api
|