https://github.com/outerbounds/pam-jwt
Defines a PAM that authenticates JWT input based on it's claims and signature
https://github.com/outerbounds/pam-jwt
Last synced: over 1 year ago
JSON representation
Defines a PAM that authenticates JWT input based on it's claims and signature
- Host: GitHub
- URL: https://github.com/outerbounds/pam-jwt
- Owner: outerbounds
- Created: 2023-10-03T16:41:23.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2023-10-03T17:05:55.000Z (over 2 years ago)
- Last Synced: 2025-02-21T20:42:48.167Z (over 1 year ago)
- Language: Go
- Homepage:
- Size: 6.84 KB
- Stars: 1
- Watchers: 5
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Overview
`pam-jwt` is a PAM created to validate JWT tokens. It is mostly based on the code from https://github.com/salesforce/pam_oidc. This PAM takes in the issuer and audience we would like to match to the JWT tokens that will be passed in. It then validates these inputs match the claims in the token, that the token hasn't expired and has a valid signature before returning success.
## Usage
Example usage:
```
# inside /etc/pam.d/ssd file
auth required /lib/security/pam_oidc.so issuer=https://issuer.example.com aud=https://foo.outerbounds.com/origin
```