The upstream issues got closed. It is referenced in:

• .goreleaser.yml#L66

This issue was created by the ORY Closed Reference Notifier GitHub action.

Is your feature request related to a problem? Please describe.

The public key-based request signing functionality added to sso_proxy in buzzfeed/sso#106 is undocumented. In particular, it's not immediately obvious how to a) generate an appropriate keypair or b) validate a signed request in an upstream service.

Describe the solution you'd like

New documenta

go-jwt seems to not be maintained really. It has open/known security issue (which have multiple PRs open to address, earliest in 2018: dgrijalva/jwt-go#286). And it requires numbers to be floats because it cannot validate ints. [PR to fix this has been made](https://github.com/dgrijalva

To simplify the distribution of the step-cli on Windows, it would be great to publish a simple chocolatey package. In the end, one would be able to use "choco install step" to grab step.exe and have it automatically available in the system path. Right now I download the Windows prebuilt executable zip file and manually "install" it. By the way, the current .zip file has a very deep directory struc