Parameters
- jwks: {
keys: {
alg?: string;
crv?: string;
d?: string;
dp?: string;
dq?: string;
e?: string;
ext?: boolean;
k?: string;
key_ops?: string[];
kid?: string;
kty: string;
n?: string;
oth?: { d?: string; r?: string; t?: string; [key: string]: unknown }[];
p?: string;
q?: string;
qi?: string;
use?: string;
x?: string;
x5c?: string[];
x5t?: string;
"x5t#S256"?: string;
x5u?: string;
y?: string;
[key: string]: unknown;
}[];
[key: string]: unknown;
} - options: { kid?: string; supportedAlgValues?: string[] }
Optionalkid?: string
OptionalsupportedAlgValues?: string[]
Returns
| {
alg?: string;
crv?: string;
d?: string;
dp?: string;
dq?: string;
e?: string;
ext?: boolean;
k?: string;
key_ops?: string[];
kid?: string;
kty: string;
n?: string;
oth?: { d?: string; r?: string; t?: string; [key: string]: unknown }[];
p?: string;
q?: string;
qi?: string;
use?: string;
x?: string;
x5c?: string[];
x5t?: string;
"x5t#S256"?: string;
x5u?: string;
y?: string;
[key: string]: unknown;
}
| undefined
Matching encryption JWK, or the first available key when no better match exists.
Selects an encryption JWK from a JWKS.
Selection prefers an explicit
kid, then keys whosealgis supported, then keys marked for encryption or not explicitly marked for signatures.