WebCrypto JWK support

Most JWT packages seem to use most of the 1mb limit for workers. If we had JWK support in the WebCrypto implementation, you’d be able to remove a lot of code.

Or maybe CF has another way to validate JWTs for apps?

It’s fully possible to use JWTs with the Web Crypto API.

I’m signing, parsing and decoding JWTs without any issues and my script is just 2kb large.

There are a few threads about it here that you can piece together to a working JTW package.

If you’re after full App authentication, I’d suggest using CF Access instead.