Get JWKS (Public Keys)

curl -X GET https://auth.humansoft.co.th/oauth2/v1/.well-known/jwks.json

// ใช้กับ jwks-rsa library
const jwksClient = require('jwks-rsa')
const jwt = require('jsonwebtoken')
 
const client = jwksClient({
  jwksUri: 'https://auth.humansoft.co.th/oauth2/v1/.well-known/jwks.json',
  cache: true,
  cacheMaxAge: 86400000, // 24 ชั่วโมง
})
 
function getKey(header, callback) {
  client.getSigningKey(header.kid, (err, key) => {
    if (err) return callback(err)
    callback(null, key.getPublicKey())
  })
}
 
// Verify token
jwt.verify(token, getKey, {
  algorithms: ['RS256'],
  issuer: 'https://auth.humansoft.co.th',
}, (err, decoded) => {
  if (err) {
    console.error('Token verification failed:', err.message)
  } else {
    console.log('Token is valid:', decoded)
  }
})

import requests
import jwt
from jwt import PyJWKClient
 
# ใช้กับ PyJWT library
jwks_url = "https://auth.humansoft.co.th/oauth2/v1/.well-known/jwks.json"
jwks_client = PyJWKClient(jwks_url)
 
token = "ACCESS_TOKEN_HERE"
 
# ดึง signing key จาก JWKS
signing_key = jwks_client.get_signing_key_from_jwt(token)
 
# Verify token
decoded = jwt.decode(
    token,
    signing_key.key,
    algorithms=["RS256"],
    issuer="https://auth.humansoft.co.th"
)
print("Token is valid:", decoded)

<?php
// ดึง JWKS
$url = "https://auth.humansoft.co.th/oauth2/v1/.well-known/jwks.json";
 
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 
$response = curl_exec($ch);
$jwks = json_decode($response, true);
curl_close($ch);
 
// แสดง public keys
foreach ($jwks["keys"] as $key) {
    echo "Key ID: " . $key["kid"] . "\n";
    echo "Algorithm: " . $key["alg"] . "\n";
    echo "Key Type: " . $key["kty"] . "\n";
}
 
// สำหรับ verify JWT ใช้ firebase/php-jwt library
// use Firebase\JWT\JWT;
// use Firebase\JWT\JWK;
//
// $publicKeys = JWK::parseKeySet($jwks);
// $decoded = JWT::decode($token, $publicKeys);
?>