Merge pull request #2762 from jacobnguyenn/update-jwt-auth

fix: still verify kid on single pub key fetched
This commit is contained in:
Krish Dholakia 2024-03-29 21:08:22 -07:00 committed by GitHub
commit f44df7bed6
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -114,7 +114,8 @@ class JWTHandler:
public_key: Optional[dict] = None public_key: Optional[dict] = None
if len(keys) == 1: if len(keys) == 1:
public_key = keys[0] if kid is None or key["kid"] == kid:
public_key = keys[0]
elif len(keys) > 1: elif len(keys) > 1:
for key in keys: for key in keys:
if kid is not None and key["kid"] == kid: if kid is not None and key["kid"] == kid: