Support RFC 7638 canonical kid for JWK

[zamicol]

The jose-util complains that, "JWK Thumbprint (RFC 7638) is not used for key id because of lack of canonical representation" and instead has an external dependency to github.com/google/uuid for the kid.

go-jose/jose-util/generate.go

Line 154 in 2c8b642

// JWK Thumbprint (RFC 7638) is not used for key id because of lack of

Unless I'm taking crazy pills, RFC 7638 is exactly that, the prescription for a reproducible canonical kid. It even begins by saying, "[This specification defines the] method of creating a canonical form..."

And while I'm asking questions, there doesn't appear to be a clean way to produce a JWK outside of the jose-util, which doesn't expose the functions and is limited to writing JWK's to a file. Is that suppose to be the role of "func NewSigner"? Would there be any interest/need for a 'func NewJWK' ? Either way, I would love to see an example.

[zamicol]

See Pull Request #269