Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

OIDC key resolver fails to recognize an x5t#S256 thumbprint #36855

Closed
sberyozkin opened this issue Nov 3, 2023 · 1 comment · Fixed by #36857
Closed

OIDC key resolver fails to recognize an x5t#S256 thumbprint #36855

sberyozkin opened this issue Nov 3, 2023 · 1 comment · Fixed by #36857
Assignees
@sberyozkin
Labels
area/oidc kind/bug Something isn't working
Milestone
3.5.1

Comments

@sberyozkin
Copy link
Member

Describe the bug

If the JWT token headers contain an x5t#S256 certificate thumbprint, as opposed to an x5t one, OIDC resolver fails to find a JWK key with the matching certificate

Expected behavior

No response

Actual behavior

No response

How to Reproduce?

No response

Output of uname -a or ver

No response

Output of java -version

No response

Quarkus version or git rev

No response

Build tool (ie. output of mvnw --version or gradlew --version)

No response

Additional information

No response
@sberyozkin sberyozkin added the kind/bug Something isn't working label Nov 3, 2023
@sberyozkin sberyozkin self-assigned this Nov 3, 2023
@quarkus-bot quarkus-bot bot added the area/oidc label Nov 3, 2023
@quarkus-bot quarkus-bot
Copy link

quarkus-bot bot commented Nov 3, 2023

/cc @pedroigor (oidc)

@sberyozkin sberyozkin mentioned this issue Nov 3, 2023
Merged
@quarkus-bot quarkus-bot bot added this to the 3.6 - main milestone Nov 3, 2023
@gsmet gsmet modified the milestones: 3.6 - main, 3.5.1 Nov 6, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@sberyozkin sberyozkin

Labels
area/oidc kind/bug Something isn't working
Projects
None yet
Milestone
3.5.1
Development

Successfully merging a pull request may close this issue.

Fix OIDC key resolver to accept SHA256 certificate thumbprints sberyozkin/quarkus
2 participants
@sberyozkin @gsmet