Skip to content

Failed to verify claims on login #121

@scotwells

Description

@scotwells

Users are reporting an intermittent issue where the app states if fails to verify claims of the access token that was retrieved. The error logs of the application state "Failed to verify claims: Signature verification failed: No matching key found" which points to the JWT being signed with a key the app isn't recognizing.

Screenshot from the app:

Image

We need to:

  • Verify the application pulls the latest JWKs from Datum Cloud's auth service before it starts the login flow so it can verify the signatures correctly.
  • Add logging to the application to specify what public key the access token signature was being compared against so we can compare with what key was being advertised
  • Return better error messaging to users

Metadata

Metadata

Labels

No labels
No labels

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions