{"action":"created","issue":{"url":"https://api.github.com/repos/cloudflare/cfssl/issues/451","labels_url":"https://api.github.com/repos/cloudflare/cfssl/issues/451/labels{/name}","comments_url":"https://api.github.com/repos/cloudflare/cfssl/issues/451/comments","events_url":"https://api.github.com/repos/cloudflare/cfssl/issues/451/events","html_url":"https://github.com/cloudflare/cfssl/pull/451","id":120473180,"number":451,"title":"Create Authentication for CFSSL API -- WIP","user":{"login":"wl2002","id":9061601,"avatar_url":"https://avatars.githubusercontent.com/u/9061601?v=3","gravatar_id":"","url":"https://api.github.com/users/wl2002","html_url":"https://github.com/wl2002","followers_url":"https://api.github.com/users/wl2002/followers","following_url":"https://api.github.com/users/wl2002/following{/other_user}","gists_url":"https://api.github.com/users/wl2002/gists{/gist_id}","starred_url":"https://api.github.com/users/wl2002/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wl2002/subscriptions","organizations_url":"https://api.github.com/users/wl2002/orgs","repos_url":"https://api.github.com/users/wl2002/repos","events_url":"https://api.github.com/users/wl2002/events{/privacy}","received_events_url":"https://api.github.com/users/wl2002/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-12-04T19:48:32Z","updated_at":"2015-12-06T03:13:16Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/cloudflare/cfssl/pulls/451","html_url":"https://github.com/cloudflare/cfssl/pull/451","diff_url":"https://github.com/cloudflare/cfssl/pull/451.diff","patch_url":"https://github.com/cloudflare/cfssl/pull/451.patch"},"body":"Created a Verify method to make sure that a JWT was of the valid form. It seems that to verify JWTs it requires a public key, so I'm not entirely sure how that will work in production. I'm also trying to figure out how you would make the verification general enough to look at a token's claims when in production the claim values could be set to anything."},"comment":{"url":"https://api.github.com/repos/cloudflare/cfssl/issues/comments/162265931","html_url":"https://github.com/cloudflare/cfssl/pull/451#issuecomment-162265931","issue_url":"https://api.github.com/repos/cloudflare/cfssl/issues/451","id":162265931,"user":{"login":"grittygrease","id":5125095,"avatar_url":"https://avatars.githubusercontent.com/u/5125095?v=3","gravatar_id":"","url":"https://api.github.com/users/grittygrease","html_url":"https://github.com/grittygrease","followers_url":"https://api.github.com/users/grittygrease/followers","following_url":"https://api.github.com/users/grittygrease/following{/other_user}","gists_url":"https://api.github.com/users/grittygrease/gists{/gist_id}","starred_url":"https://api.github.com/users/grittygrease/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/grittygrease/subscriptions","organizations_url":"https://api.github.com/users/grittygrease/orgs","repos_url":"https://api.github.com/users/grittygrease/repos","events_url":"https://api.github.com/users/grittygrease/events{/privacy}","received_events_url":"https://api.github.com/users/grittygrease/received_events","type":"User","site_admin":false},"created_at":"2015-12-06T03:13:16Z","updated_at":"2015-12-06T03:13:16Z","body":"Usually public keys are obtained from a known URL. It's worth creating these options in the auth section of the configuration file, including a URL for where to obtain the public key."}}