Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Optimize secret matching #201

Open
litoj opened this issue Jan 26, 2025 · 0 comments
Open

Optimize secret matching #201

litoj opened this issue Jan 26, 2025 · 0 comments

Comments

@litoj
Copy link

litoj commented Jan 26, 2025

I am getting Microsoft Entra ID setup and in this article I clearly saw the possibility to quickly determine the key (secret) to check against by making a map of KeyIDs mapped to key secrets. This would allow decoding with just the correct key, instead of trying them all.

That would change the Array verification to something like this:

let decodedTokens = []
if (secret instanceof Array) {
    decodedTokens = secret.map(async s => await verify(token, s, opts));
} else if (secret) {
    decodedTokens = verify(token, secret[token.kid] || secret, opts);
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant