Suggestions needed to validate oauth tokens

[Sergey A. Osokin]

Hi,

hope you're doing well.

On Thu, Nov 10, 2022 at 10:30:58PM +0100, SA Squared wrote:
[...]
> Is there a way to have Nginx pass that token to Keycloak for
> validation before allowing access to those files.

Here's the link [1] to the reference implementation of OpenID Connect
integration with NGINX Plus, the solution utilizes auth_jwt directive [2],
of the ngx_http_auth_jwt_module [3], key-value module [4], and 
nginx javascript module [5].

References
1. https://github.com/nginxinc/nginx-openid-connect
2. http://nginx.org/en/docs/http/ngx_http_auth_jwt_module.html#auth_jwt
3. http://nginx.org/en/docs/http/ngx_http_auth_jwt_module.html
4. http://nginx.org/en/docs/http/ngx_http_keyval_module.html
5. http://nginx.org/en/docs/njs/

Hope that helps.

-- 
Sergey A. Osokin