GitLab

Verified using the following:
(update {:my-url {:kid-1 123}} :my-url merge {:kid-1 999})
=> {:my-url {:kid-1 999}}
(update {:my-url {:kid-1 123}} :my-url merge {:kid-2 999})
=> {:my-url {:kid-1 123, :kid-2 999}}

Give meaningful error message when jwks-url is nil #4
Handle "Bearer ey..." as input #5

Use latest buddy library and clojure logging versions.
Use defonce on keystore atom to prevent binding of new atom to same symbol.
Signed-off-by: Snorre Magnus Davøen <snorre.davoen@nsd.no>

[skip-ci]
Signed-off-by: Snorre Magnus Davøen <snorre.davoen@nsd.no>

The changelog file refered to the wrong tag names. The tags use the character
'v' in front of the version name. This is now fixed.
Signed-off-by: Snorre Magnus Davøen <snorre.davoen@nsd.no>

The 0.4.0 release enables support for claims signing and private key resolution.
Signed-off-by: Snorre Magnus Davøen <snorre.davoen@nsd.no>

[skip-ci]
Signed-off-by: Snorre Magnus Davøen <snorre.davoen@nsd.no>

Signed-off-by: Snorre Magnus Davøen <snorre.davoen@nsd.no>

Signed-off-by: Snorre Magnus Davøen <snorre.davoen@nsd.no>

The library now adds wrappers around the buddy library's sign function. This is
made possible by extracting any private keys from the json web key list.

Specs are added for the new private key functionality.

The resolve-key function is now private, and new functions resolve-public-key
and resolve-private-key has taken its place.
Signed-off-by: Snorre Magnus Davøen <snorre.davoen@nsd.no>

nil kid is explicitly allowed by specs

Signed-off-by: Snorre Magnus Davøen <snorre.davoen@nsd.no>

Signed-off-by: Snorre Magnus Davøen <snorre.davoen@nsd.no>

Signed-off-by: Snorre Magnus Davøen <snorre.davoen@nsd.no>

The resolve-key function now logs first resolve attempt as a debug
statement. For usual INFO-level logging this will effectively turn off
logging of the first key resolve attempt which covers most resolve
calls.

If the key is not found the clj-jwt library will log the error with
error level before throwing the exception. This might help with
debugging when encountering problems with token validation.
Signed-off-by: Snorre Magnus Davøen <snorre.davoen@nsd.no>

Signed-off-by: Snorre Magnus Davøen <snorre.davoen@nsd.no>