Hi,

I have a single-tenant application that receives requests from users containing an access token they get from AWS Cognito. I use Joken to verify the token with the help of Joken JWKS hook to fetch the public keys from a URL. The single static URL is is part of my application configuration.

Now the problem: I need to turn my application into multi-tenant, hence it will have to verify tokens from different Cognito’s user pools, which means different JWKS URLs. Instead of only one statically configured URL, each token will bring it in its “iss” claim.

The DefaultStrategyTemplate doesn’t seem to support this dynamic approach, so I’m wondering if there is an alternative or if I’ll have to code it myself. In the latter case, would it be an implementation of the JokenJwks.SignerMatchstrategy behavior or an entire Joken.Hooks?

Regards,

Roger