From 2f56aa92976e8b0e8c27d45d397ab5c2380d114f Mon Sep 17 00:00:00 2001 From: Mark Fussell Date: Fri, 26 May 2023 17:56:44 -0700 Subject: [PATCH] Update daprdocs/content/en/reference/components-reference/supported-cryptography/json-web-key-sets.md Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com> Signed-off-by: Mark Fussell --- .../json-web-key-sets.md | 32 +++++++++++++++++-- 1 file changed, 30 insertions(+), 2 deletions(-) diff --git a/daprdocs/content/en/reference/components-reference/supported-cryptography/json-web-key-sets.md b/daprdocs/content/en/reference/components-reference/supported-cryptography/json-web-key-sets.md index 8f663760f..80bbc7660 100644 --- a/daprdocs/content/en/reference/components-reference/supported-cryptography/json-web-key-sets.md +++ b/daprdocs/content/en/reference/components-reference/supported-cryptography/json-web-key-sets.md @@ -31,8 +31,36 @@ spec: type: crypto.jwks version: v1 metadata: - - name: jwks - value: fixtures/crypto/jwks/jwks.json + # Example 1: load JWKS from file + - name: "jwks" + value: "fixtures/crypto/jwks/jwks.json" + # Example 2: load JWKS from a HTTP(S) URL + # Only "jwks" is required + - name: "jwks" + value: "https://example.com/.well-known/jwks.json" + - name: "requestTimeout" + value: "30s" + - name: "minRefreshInterval" + value: "10m" + # Option 3: include the actual JWKS + - name: "jwks" + value: | + { + "keys": [ + { + "kty": "RSA", + "use": "sig", + "kid": "…", + "n": "…", + "e": "…", + "issuer": "https://example.com" + } + ] + } + # Option 3b: include the JWKS base64-encoded + - name: "jwks" + value: | + eyJrZXlzIjpbeyJ… ``` {{% alert title="Warning" color="warning" %}}