JWT & JWK without Key ID (kid) #7306
Unanswered
joshblease
asked this question in
Ideas
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
I am currently using Teleport to access the management UI using a JWT injected by Teleport itself.
The token does not include a kid field in the header:
The other issue is that the Teleport jwks endpoint returns a list of a single key without a kid:
Is it possible to have the OAuth plugin default to the only key it finds from the jwks endpoint if a token doesn't have a kid?
My current solution is to manually create the pem from the jwk and statically copy that into the advanced config file.
Beta Was this translation helpful? Give feedback.
All reactions