Brad LarsenandKashif Khan
aade3bff55
Lint / semgrep (push) Waiting to run
Lint / golangci-lint (push) Waiting to run
Release / Release (push) Waiting to run
Scan for secrets / test (push) Waiting to run
Test / test (push) Waiting to run
Test / test-community (push) Waiting to run
This adds a generic detector and verifier for generic JWTs. This uses regular expressions for detection. Only public key cryptography algorithms are supported. Additionally, OIDC Discovery is attempted against the issuer to fetch the public key for signature verification. Bonus Cleanup: * Fix mixed indentation in alchemy test * Use `strings.ReplaceAll(...)` instead of `strings.Replace(..., -1)` * Use integer range loop instead of explicit counting loop * Revise and expand detectors.go comments --------- Co-authored-by: Kashif Khan <[email protected]>