Fake JWT Auth Server

Overview

This library creates a web server that you can use to fake a real JWT token auth server.

If you are not familiar with JSON Web Key (JWK) or JSON Web Token (JWT) there is a good overview and description here.

The fake web server provides two endpoints that are described below:

1. .well-known/jwks.json that returns a JWK set containing a single key definition
2. /oauth/token that returns a JWT signed with the key returned from the above endpoint

If you are building an application that uses JWTs for accessing secured endpoints, you can configure your application to point at the JWKs endpoint, so that it can use the JWK to decode the JWT bearer token that you provide in your request. Then when you want to call your secured endpoint you can call the JWT endpoint to generate the token to use in your Authorization header.

Useful Commands

// cleans build directories
// prints currentVersion
// formats code
// builds code
// runs tests
// checks for gradle issues
// checks dependency versions
./gradlew clean currentVersion dependencyUpdates lintGradle spotlessApply build