-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Description
Users are reporting an intermittent issue where the app states if fails to verify claims of the access token that was retrieved. The error logs of the application state "Failed to verify claims: Signature verification failed: No matching key found" which points to the JWT being signed with a key the app isn't recognizing.
Screenshot from the app:
We need to:
- Verify the application pulls the latest JWKs from Datum Cloud's auth service before it starts the login flow so it can verify the signatures correctly.
- Add logging to the application to specify what public key the access token signature was being compared against so we can compare with what key was being advertised
- Return better error messaging to users
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels