-
-
Notifications
You must be signed in to change notification settings - Fork 24
Closed
Labels
featNew feature or request.New feature or request.
Description
Preflight checklist
- I could not find a solution in the existing issues, docs, nor discussions.
- I agree to follow this project's Code of Conduct.
- I have read and am following this repository's Contribution Guidelines.
- This issue affects my Ory Cloud project.
- I have joined the Ory Community Slack.
- I am signed up to the Ory Security Patch Newsletter.
Describe your problem
Issue:
The most popular ruby gem for JWTs expects for incoming tokens to include a header with the key: "kid" and the value is the key ID of the signing JWK. Without that header key I'm unable to use the decode method successfully.
Describe your ideal solution
I'm hoping supporting this is as simple as creating a custom signer that adds the header.
var signerOpts = jose.SignerOptions{}
signerOpts.WithHeader("kid", someID)Current signer: https://github.com/ory/cli/blob/master/cmd/cloud/proxy/common.go#L186
Workarounds or alternatives
The ruby lib in question doesn't appear to give me any way of specifying the key ID and is instead parsing the JWT head for it. I've been unable to find a workaround.
Version
v0.1.22
Additional Context
Version: v0.1.22
Git Hash: 93b27f5
Build Time: 2022-01-21T13:51:59Z
Metadata
Metadata
Assignees
Labels
featNew feature or request.New feature or request.