supabase / supavisor / 40558444591

83%

Build Type

push

github

Committed by web-flow

Commit Message

feat: support JWKS based auth (#1147)

Add support for JWKS based JWT token verification.

Requires the following env vars to be set:
 * `API_JWT_TRUSTED_ISSUER`
 * `API_JWT_EXPECTED_AUD`
 * `API_JWT_ALLOWED_SUBS`

As of now supports a single trusted issuer and is tested agains AWS STS
`WebTokenIdentity`.

Works alongside the existing `API_JWT_SECRECT`-based token verification
— dispatching on the token's JWS header. Testable with
https://github.com/supabase/platform/pull/40480.

Requires:
* https://github.com/supabase/platform/pull/37078
*  https://github.com/supabase/platform/pull/37079/

---------

Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>

Coverage Stats

21 of 61 new or added lines in 7 files covered. (34.43%)

1 existing line in 1 file now uncovered.

3534 of 4279 relevant lines covered (82.59%)

43215.91 hits per line