[MESOS-8974] Add support for JWK sets to handle multiple keys in JWT library

• Type: Improvement
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Component/s: security
• Assignee: Clément Michaud
• Reporter: Clément Michaud
• Created: 04/Jun/18 13:23
• Updated: 29/Apr/19 09:26

Description

Mesos should be able to support JWK sets (and deprecate the --jwt_secret_key flag?) in order to handle multiple keys (of any type) in the JWT library and allow smooth key rotations between two or more keys.

This would require implementing the following RFC: https://tools.ietf.org/html/rfc7517.