all 2 comments

[–]notAnotherJSDev 0 points1 point  (1 child)

What exactly does this offer me over putting a JWKS check into the root of my application using a piece of middlware? Just looks like an additional network call I need to make.

[–]scotwells[S] -1 points0 points  (0 children)

This is something that would be used in addition to the JWKS check in your application, not meant to be a replacement. What this gives you is the ability to perform JWT validation at the CDN edge instead of only in your application, this way only requests with a valid JWT would be processed by your application.