@paulspencerwilliams We built this library (https://github.com/magnetcoop/buddy-auth.jwt-oidc) to use it from Duct, but if you strip the Duct/Integrant specific parts, it will do what you are looking for.
oh brilliant @iarenaza, that's tonight's activity sorted!