Function: actorVerifyKey()
actorVerifyKey(
jwkJson):ActorVerifyKey
Defined in: packages/authz/src/actor-token.ts:66
Reads one public JWK, as the secret store holds it at
secret://oktoid/<gateway>/actor-verify-v<n>.
Refuses anything but an Ed25519 public key with a well-formed kid, and refuses a
JWK carrying d: a private key in a verify slot means the signing key has been copied
to a deployable that must never hold it, which is a deployment defect to stop on, not
a key to use quietly.
Parameters
jwkJson
string
The JWK as JSON text.
Returns
The key, ready for verifyActorToken.
Throws
The text is not such a key; the message names what is wrong and never quotes key material.