{
  "name": "jwksethandler",
  "condition": "${find(request.uri.path, '/jwksethandler')}",
  "heap": [
    {
      "name": "Base64EncodedSecretStore",
      "type": "Base64EncodedSecretStore",
      "config": {
        "secrets": {
          "keystore.secret.id": "cGFzc3dvcmQ="
        }
      }
    },
    {
      "name": "KeyStoreSecretStore",
      "type": "KeyStoreSecretStore",
      "config": {
        "file": "/path/to/secrets/jwk-example.p12",
        "storeType": "PKCS12",
        "storePasswordSecretId": "keystore.secret.id",
        "secretsProvider": "Base64EncodedSecretStore",
        "mappings": [
          {
            "secretId": "key.secret.id",
            "aliases": [
              "test-cert"
            ]
          }
        ]
      }
    }
  ],
  "handler": {
    "type": "JwkSetHandler",
    "config": {
      "secretsProvider": "KeyStoreSecretStore",
      "purposes": [
        {
          "secretId": "key.secret.id",
          "keyUsage": "VERIFY"
        }
      ]
    }
  }
}