Forum Discussion

Cirrocumulus

Jul 27, 2021

F5 Oauth server introspect JWT access token from external server

dear all, I already have setup a F5 as oauth client, F5 as oauth server (AS) and F5 as API gateway where F5 performs the introspect internally in its oauth database. So that is all working fine. ...

Cirrocumulus

Aug 06, 2021

The answer is to use the JWKS endpoint and verify the JWT kid signature value and perform a modulus check. So there is no need to contact the introspect endpoint.

https://medium.com/trabe/validate-jwt-tokens-using-jwks-in-java-214f7014b5cf

https://software-factotum.medium.com/validating-rsa-signature-for-a-jws-10229fb46bbf

Forum Discussion

F5 Oauth server introspect JWT access token from external server

Recent Discussions

import live updates from version x to version y

Tenant image upgrade

iRule editor partition button does not work

F5Access | MacOS Sonoma

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

Related Content

LTM Policy don't send to external log server

CSV to Address External Datagroup File

snmp-check external monitor

F5 BIG-IP and NGINX - Securing Your AWS VPC Lattice Applications for External Clients

F5 BigIP External Authentication and NTP servers in non default route domain.