AWS KMS adapter for golang-jwt/jwt-go library

This library provides an AWS KMS(Key Management Service) adapter to be used with the popular GoLang JWT library golang-jwt/jwt-go.

It will Sign a JWT token using an asymmetric key stored in AWS KMS.

Verification can be done both using KMS Verify method or locally with a cached public key (default).

The minimum supported GoLang version is 1.20, since github.com/aws/aws-sdk-go-v2 v1.28.0 fails to build with anything older.

Supported key types

Usage example

See example.go

Special thanks

Shouting out to:

• dgrijalva

  for the easy to extend GoLang JWT Library

• golang-jwt

  for taking over the project from dgrijalva

• Mikael Gidmark

  AWS KMS ECC returns the signature in DER-encoded object as defined by ANS X9.62–2005 as mentioned here

• codelittinc

  for their DER to (R,S) and (R,S) to DER methods found here

• karalabe

  for reviewing my code

• gkelly

  for various contributions especially around the library's unit testability