JSON Web Key Set, configured either by an explicit list of JWK or by a list of JWK URIs.
When JWK URIs are used, the keys are fetched at startup. If they cannot be retrieved at that point (e.g. the issuer is not running yet), the gateway starts anyway and fetching is retried on the first request that needs the keys. Until the keys have been retrieved, requests validated against this key set are rejected.
If an authorizationService with a jwksRefreshInterval is configured, the key set is additionally refreshed periodically.
Syntax
jwks:
authorizationService: <string>
jwks:
- <jwks-jwk>
jwksUris: <string>
jwks:
authorizationService: <string>
jwks:
- <jwks-jwk>
jwksUris: <string>
Attributes
| Name | Required | Default | Description | Examples |
|---|---|---|---|---|
| authorizationService | false | - | - | - |
| jwksUris | false | - | - | - |
Child Structure
| Element | Cardinality | Description |
|---|---|---|
| jwks-jwk | 0..* |