Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(jans-auth-server): public key is not correctly provided for outdated keystores during id_token creation after key_ops_type is added #3840

Closed
yuriyz opened this issue Feb 13, 2023 · 0 comments · Fixed by #3841
Assignees
Labels
comp-jans-auth-server Component affected by issue or PR kind-bug Issue or PR is a bug in existing functionality
Milestone

Comments

@yuriyz
Copy link
Contributor

yuriyz commented Feb 13, 2023

Describe the bug

fix(jans-auth-server): public key is not correctly provided for outdated keystores during id_token creation after key_ops_type is added

2023-02-13 12:30:07,936 ERROR [qtp1549725679-18] 104a4eb1-3435-4ffe-8038-0823869ffad0 [jans.as.server.model.common.AuthorizationGrant] (AuthorizationGrant.java:377) - The public key is not valid
io.jans.as.model.exception.InvalidJweException: The public key is not valid
        at io.jans.as.server.model.token.JwrService.encryptJwe(JwrService.java:115) ~[classes/:?]
        at io.jans.as.server.model.token.JwrService.encode(JwrService.java:78) ~[classes/:?]
        at io.jans.as.server.model.token.IdTokenFactory.createJwr(IdTokenFactory.java:378) ~[classes/:?]
        at io.jans.as.server.model.token.IdTokenFactory$Proxy$_$$_WeldClientProxy.createJwr(Unknown Source) ~[classes/:?]
        at io.jans.as.server.model.common.AuthorizationGrant.createIdTokenInternal(AuthorizationGrant.java:109) ~[classes/:?]
        at io.jans.as.server.model.common.AuthorizationGrant.createIdToken(AuthorizationGrant.java:358) ~[classes/:?]
        at io.jans.as.server.authorize.ws.rs.AuthorizeRestWebServiceImpl.authorize(AuthorizeRestWebServiceImpl.java:448) ~[classes/:?]
        at io.jans.as.server.authorize.ws.rs.AuthorizeRestWebServiceImpl.requestAuthorization(AuthorizeRestWebServiceImpl.java:262) ~[classes/:?]
        at io.jans.as.server.authorize.ws.rs.AuthorizeRestWebServiceImpl.requestAuthorizationGet(AuthorizeRestWebServiceImpl.java:203) ~[classes/:?]
        at io.jans.as.server.authorize.ws.rs.AuthorizeRestWebServiceImpl$Proxy$_$$_WeldClientProxy.requestAuthorizationGet(Unknown Source) ~[classes/:?]
        at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:?]
        at jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:?]
        at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:?]
        at java.lang.reflect.Method.invoke(Method.java:566) ~[?:?]
        at org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:170) ~[resteasy-core-6.0.3.Final.jar:6.0.3.Final]
        at org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:130) ~[resteasy-core-6.0.3.Final.jar:6.0.3.Final]
        at org.jboss.resteasy.core.ResourceMethodInvoker.internalInvokeOnTarget(ResourceMethodInvoker.java:660) ~[resteasy-core-6.0.3.Final.jar:6.0.3.Final

Related: #3415

@yuriyz yuriyz added kind-bug Issue or PR is a bug in existing functionality comp-jans-auth-server Component affected by issue or PR labels Feb 13, 2023
@yuriyz yuriyz added this to the 1.0.7 milestone Feb 13, 2023
@yuriyz yuriyz self-assigned this Feb 13, 2023
yuriyz added a commit that referenced this issue Feb 13, 2023
…stores during id_token creation if key_ops_type is absent #3840
yuriyz added a commit that referenced this issue Feb 13, 2023
…stores during id_token creation if key_ops_type is absent #3840 (#3841)
pujavs pushed a commit that referenced this issue Feb 14, 2023
…stores during id_token creation if key_ops_type is absent #3840 (#3841)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
comp-jans-auth-server Component affected by issue or PR kind-bug Issue or PR is a bug in existing functionality
Projects
None yet
1 participant