JWT & JWK without Key ID (kid) #7306
Unanswered
joshblease
asked this question in
Ideas
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I am currently using Teleport to access the management UI using a JWT injected by Teleport itself.
The token does not include a kid field in the header:
The other issue is that the Teleport jwks endpoint returns a list of a single key without a kid:
Is it possible to have the OAuth plugin default to the only key it finds from the jwks endpoint if a token doesn't have a kid?
My current solution is to manually create the pem from the jwk and statically copy that into the advanced config file.
Beta Was this translation helpful? Give feedback.
All reactions