Merge pull request #2762 from jacobnguyenn/update-jwt-auth

fix: still verify kid on single pub key fetched
BerriAI · Mar 30, 2024 · f44df7b · f44df7b
2 parents 48ac36e + 4bf4be3
commit f44df7b
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/litellm/proxy/auth/handle_jwt.py b/litellm/proxy/auth/handle_jwt.py
@@ -114,7 +114,8 @@ async def get_public_key(self, kid: Optional[str]) -> dict:
         public_key: Optional[dict] = None
 
         if len(keys) == 1:
-            public_key = keys[0]
+            if kid is None or key["kid"] == kid:
+                public_key = keys[0]
         elif len(keys) > 1:
             for key in keys:
                 if kid is not None and key["kid"] == kid: