impl(auth): move away from jsonwebtoken

[alvarowolfx]

Towards #3947

[codecov]

Codecov Report

❌ Patch coverage is 88.79310% with 13 lines in your changes missing coverage. Please review.
✅ Project coverage is 94.85%. Comparing base (91b9598) to head (83eae1b).
⚠️ Report is 2 commits behind head on main.

Files with missing lines	Patch %	Lines
src/auth/src/credentials/idtoken/verifier.rs	87.69%	8 Missing ⚠️
src/auth/src/credentials/internal/jwk_client.rs	90.19%	5 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4403      +/-   ##
==========================================
- Coverage   94.98%   94.85%   -0.13%     
==========================================
  Files         192      192              
  Lines        7280     7373      +93     
==========================================
+ Hits         6915     6994      +79     
- Misses        365      379      +14     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[alvarowolfx]

@coryan another take on this, now trying to move most of the crypto related stuff to rustls, but to read public certificates as DER I had to add others crate lower level crates - spki and pkcs1, which were already part of the dependency tree IIUC.

[coryan]

@coryan another take on this, now trying to move most of the crypto related stuff to rustls, but to read public certificates as DER I had to add others crate lower level crates - spki and pkcs1, which were already part of the dependency tree IIUC.

I am warming up to this idea. Can you explore if rustls-pki-types has the features you need? That is also in our dependency tree, and it is at 1.x:

https://docs.rs/rustls-pki-types/latest/rustls_pki_types/struct.SubjectPublicKeyInfoDer.html

[alvarowolfx]

@coryan another take on this, now trying to move most of the crypto related stuff to rustls, but to read public certificates as DER I had to add others crate lower level crates - spki and pkcs1, which were already part of the dependency tree IIUC.

I am warming up to this idea. Can you explore if rustls-pki-types has the features you need? That is also in our dependency tree, and it is at 1.x:

https://docs.rs/rustls-pki-types/latest/rustls_pki_types/struct.SubjectPublicKeyInfoDer.html

I tried that too, but JWK key sets comes as a pair of prime numbers that can be used to derive the certificate key. Looks like the rustls-pki-types expect the cert to be already in DER/bytes format. But will try a bit more here.

[coryan]

Since you are here, I just noticed a typo "create" -> "crate's"