Hi Abilashini,

Why not use the constructor which takes jwkSet to validate the IDToken
instead of using the constructor which takes the jwkSetURI? If you want to
use the one which takes jwkSetURI that is only supported in IS 5.3.0. If
time permits it will be good to support both. But I think most other IDPs
might not yet support it. So use the jwkSet method first and verify
signature.

Regards,
Johann.

On Mon, Oct 31, 2016 at 5:13 PM, Abilashini Thiyagarajah <
[email protected]> wrote:

>
>
> On Thu, Oct 27, 2016 at 6:36 PM, Abilashini Thiyagarajah <
> [email protected]> wrote:
>
>> HI,
>>
>> I am working on the implementation of OIDC based SSO for WSO2 AS. When I
>> use Nimbuds API IDTokenValidator
>> <http://static.javadoc.io/com.nimbusds/oauth2-oidc-sdk/5.17.1/com/nimbusds/openid/connect/sdk/validators/IDTokenValidator.html#IDTokenValidator-com.nimbusds.oauth2.sdk.id.Issuer-com.nimbusds.oauth2.sdk.id.ClientID-com.nimbusds.jose.JWSAlgorithm-java.net.URL->,
>> I face problem in getting the JWK to validate the ID Token.
>>
>> This is mentioned in this jira
>> <https://wso2.org/jira/browse/IDENTITY-4828?page=com.atlassian.jira.plugin.system.issuetabpanels%3Aall-tabpanel>
>> as fixed in  version 5.3.0-M5
>> <https://wso2.org/jira/issues/?jql=project+%3D+IDENTITY+AND+fixVersion+%3D+5.3.0-M5>
>>
>> How can I get the value in IS version 5.2.0?
>>
>> Thanks & Regards,
>> Abilashini
>>
>> <https://wso2.org/jira/issues/?jql=project+%3D+IDENTITY+AND+fixVersion+%3D+5.3.0-M5>
>>
>> --
>> T. Abilashini
>> Intern
>> Software Engineering
>> WSO2 Inc. http://wso2.com/
>> Phone +94 719248432
>>
>>
>
>
> --
> T. Abilashini
> Intern
> Software Engineering
> WSO2 Inc. http://wso2.com/
> Phone +94 719248432
>
>


-- 
Thanks & Regards,

*Johann Dilantha Nallathamby*
Technical Lead & Product Lead of WSO2 Identity Server
Governance Technologies Team
WSO2, Inc.
lean.enterprise.middleware

Mobile - *+94777776950*
Blog - *http://nallaa.wordpress.com <http://nallaa.wordpress.com>*
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to