[public-api] Refactor JWT Sign/Verify to be reusable for OIDC - WEB-206

[easyCZ]

Description

• Refactors the initial implementation of Session JWTs Signer & Verifier into a seperate package (jws) to be re-usable for OIDC (the original was specific to session JWTs, which needed to be generalized)
• new Signer/Verifier only deals with signing claims, and verifying them, but does not deal with the claims contents (this makes it re-usable)
  • It ensures that we use our signing keys for new tokens
  • It ensures we can accept older keys when verifying
• The Session JWT is refactored to provide only helper constructor and verifier for the particular Session JWT, specific through the particular type of Claims - SessionClaims

If you want to see how it simplifies OIDC JWT signing/decode, see #17328

Related Issue(s)

Fixes #

How to test

Unit tests

Documentation

Preview status

gitpod:summary

Build Options:

• /werft with-werft
  Run the build with werft instead of GHA
• leeway-no-cache
• /werft no-test
  Run Leeway with --dont-test

Publish Options

• /werft publish-to-npm
• /werft publish-to-jb-marketplace

Installer Options

• analytics=segment
• with-dedicated-emulation
• with-ws-manager-mk2
• workspace-feature-flags
  Add desired feature flags to the end of the line above, space separated

Preview Environment Options:

• /werft with-local-preview
  If enabled this will build install/preview
• /werft with-preview
• /werft with-large-vm
• /werft with-gce-vm
  If enabled this will create the environment on GCE infra
• with-integration-tests=all
  Valid options are all, workspace, webapp, ide, jetbrains, vscode, ssh

/hold

[easyCZ]

/unhold