← Back to all posts

Add missing identifiers to your published JWKS

Please add the x5t#S256 and/or x5c values to the key published in your JWKS.

Workaround
-
Problem
I cannot use the Spacelift OIDC token to authenticate with my app because some identifiers are missing from your JWKS. The Spacelift OIDC token is issued with a thumbprint header that represents a hash of the certificate trust chain. Neither this thumbprint, nor the corresponding trust chain are included with any of the keys in your published JWKS. My app uses the Nimbus JOSE + JWT library (https://connect2id.com/products/nimbus-jose-jwt) to validate JWTs. It strictly requires that every header in a token must match in a published JWKS key before it will use that key to validate the token, even though the "kid" and signing algorithm otherwise match.

Please authenticate to join the conversation.

Upvoters
Status

❌ Rejected

Board

💡 Feature Requests

Tags

Integrations

Date

2 days ago

Subscribe to post

Get notified by email when there are changes.