A zero-config, language-agnostic gate that statically flags JWT misconfigurations (none alg, disabled verification, unenforced expiry, hardcoded secrets) with a clean CI exit code. Single Go binary. Grounded in RFC 8725 + OWASP.
Framework-agnostic JWT verifier for OIDC issuers with JWKS caching, strict claim validation, and scope/permission checks.
Add a description, image, and links to the rfc8725 topic page so that developers can more easily learn about it.
To associate your repository with the rfc8725 topic, visit your repo's landing page and select "manage topics."