This repository was archived by the owner on May 31, 2022. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 4k
JwkSetConverter fails when public key use is "enc" #1470
Comments
Just faced the same issue on Gluu integration. @troyhart were you able to find a work-around for it without recompiling from spring sources? |
msamusenka
added a commit
to msamusenka/spring-security-oauth
that referenced
this issue
Dec 21, 2018
skip unsupported public key use (enc) without discarding the entire set
jgrandja
pushed a commit
that referenced
this issue
Feb 18, 2019
skip unsupported public key use (enc) without discarding the entire set Fixes gh-1470
jgrandja
pushed a commit
that referenced
this issue
Feb 18, 2019
skip unsupported public key use (enc) without discarding the entire set Fixes gh-1470
jgrandja
pushed a commit
that referenced
this issue
Feb 18, 2019
skip unsupported public key use (enc) without discarding the entire set Fixes gh-1470
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
I am trying to implement a standalone resource server that validates JWTs. My authorization server is provided by GLUU. The jwks endpoint for my GLUU server returns the following:
In this resource you can see that for
kty = RSA
it includes bothuse == sig
anduse == enc
.When the
JwkSetConverter
parses this file it ends up failing when it encounters an RSA key withuse == enc
. Refer to:org.springframework.security.oauth2.provider.token.store.jwk.JwkSetConverter.createRsaJwkDefinition(Map<String, String>)
Why does the implementation explicitly fail when
use != sig
?The text was updated successfully, but these errors were encountered: