Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

/.well-known/jwks.json output wrong keys #1395

Closed
singlewind opened this issue Apr 29, 2019 · 3 comments
Closed

/.well-known/jwks.json output wrong keys #1395

singlewind opened this issue Apr 29, 2019 · 3 comments

Comments

@singlewind
Copy link

Describe the bug
The well known endpoint will expose the both public key of hydra.openid.id-token and hydra.jwt.access-token

To Reproduce
Steps to reproduce the behavior:

  1. Run the docker version of oryd/hydra:v1.0.0-rc.9_oryOS.10
  2. Open postman or any browser, visit http://[your_server]/.well-known/jwks.json
  3. Will get a duplicate key of hydra.openid.id-token, instead of both keys of hydra.openid.id-token and hydra.jwt.access-token

Expected behavior
The endpoint return both keys of hydra.openid.id-token and hydra.jwt.access-token

Screenshots
output of endpoint: .
image

keys in database: .
image

Version:

  • Environment: [Docker]
  • Version [oryd/hydra:v1.0.0-rc.9_oryOS.10]

Additional context
As documentation state, this endpoint will be affected by configuration and settings. We tried both with explicitly broadcast settings and use the default value. The behaviors are same.

     # use default value
      - STRATEGIES_ACCESS_TOKEN=jwt

    # or force the value
     - STRATEGIES_ACCESS_TOKEN=jwt 
     - WEBFINGER_JWKS_BROADCAST_KEYS:hydra.openid.id-token,hydra.jwt.access-token
@aeneasr
Copy link
Member

aeneasr commented Apr 29, 2019

Thank you! This is fixed on master already though :)

@aeneasr aeneasr closed this as completed Apr 29, 2019
@singlewind
Copy link
Author

@aeneasr great, waiting for another release.

@aeneasr
Copy link
Member

aeneasr commented Apr 29, 2019 via email

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants