Maybe change JWT lib?

[PrinzKenny1]

Hi,

I saw the discussion on discord abt the multiple audiences field in the jwt token and that the current lib only supports one audience (https://discord.com/channels/552499021260914688/1311845766750404691). They fixed it already but didn't release a new version... In general the current lib used seems rather stale, and I would suggest switching to an active one like https://github.com/lestrrat-go/jwx.

[dbarrosop]

That would be a possibility, we would need to look into it. Right now github metrics lean more towards the current library (used by and contributors). Is there any particular feature you are missing or concern beside the multiple audiences? In any case, it will mostly boil down to benefits/concerns vs effort.

[PrinzKenny1]

Nope, no further concerns as of now :)

[dbarrosop]

Ok, thanks for bringing this in. Will leave it open for now and we can re-evaluate over time as we see how both libs progress. Too much on our plate right now anyway :P