Dex Support Question

[rohanj1]

Hi, we are working on switching from google-oauth to dex-auth and it looks like the dex plugin doesn't do any token verification. I would be happy to add support for it. I'm inclined to use java-jwt to verify the JWT token using a JWKS URL. It would also be possible to hit dex/userInfo endpoint to validate the token but would put a significant load on our Dex instance. Do you have any thoughts on this? Thanks!

[rohanj1]

Created https://gerrit-review.googlesource.com/c/plugins/oauth/+/435317