Skip to content

Conversation

hiranya911
Copy link
Contributor

We have been using the same authorized HTTP client to retrieve public keys when verifying ID tokens. But since recently, the back-end server does not allow it. When called with credentials, it now returns the following error:

{
  "error": {
    "code": 400,
    "message": "Request contains an invalid argument.",
    "status": "INVALID_ARGUMENT",
    "details": [
      {
        "@type": "type.googleapis.com/google.rpc.DebugInfo",
        "detail": "No scopes defined for OAuth: serviceaccountcert.googleapis.com/google.iam.credentials.v1.CertificateService.ExternalListPublicCertificates"
      }
    ]
  }
}

This caused several of our integration tests fail.

Fixing the issue by using the default HTTP client to retrieve public keys.

@hiranya911 hiranya911 assigned hiranya911 and unassigned bklimt Jul 17, 2018
@hiranya911 hiranya911 merged commit 1d2a52c into dev Jul 17, 2018
@hiranya911 hiranya911 deleted the hkj-fix-client branch July 17, 2018 20:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants