Re: [cas-user] CAS 6.4 OIDC JWKS missing key fields?

2023-03-17 Thread Carl Waldbieser
Yan, No, our jwks doesn't have that property. But since that is just the algorithm (see https://auth0.com/docs/secure/tokens/json-web-tokens/json-web-key-set-properties), you could probably manually specify the algorithm being used in the key by adding it directly to the JSON. Thanks, Carl

Re: [cas-user] CAS 6.4 OIDC JWKS missing key fields?

2023-03-17 Thread Yan Zhou
Does your JWKS have "alg" field? it does not seem to have that option. This is what JWKS looks like in general, they do have "alg" field. I do not know how to get CAS JWKS to include it. Yan On Tuesday, March 7, 2023 at 10:29:12 AM UTC-5 waldbiec wrote: > I noticed my JWKS was missing a kid

Re: [cas-user] CAS 6.4 OIDC JWKS missing key fields?

2023-03-07 Thread Carl Waldbieser
I noticed my JWKS was missing a kid and causing weird results in one of the OIDC libraries I use for testing. I just added the kid to my key in the "keystore.jwks" manually. I just generated a uuid4, but you can use any ID unique to your keystore from what I understand. The kid then appears on

[cas-user] CAS 6.4 OIDC JWKS missing key fields?

2023-03-06 Thread Yan Zhou
Hi,, CAS 6.4 OIDC JWKS endpoint looks like this. Our vendor has problem with its missing fields such as alg, kid, and use. Anyone knows how to show these fields in JWKS? They showed us what Okta and Google OIDC provider presents, yes, they do have these fields. This probably affects OIDC