Merge pull request #2762 from jacobnguyenn/update-jwt-auth

fix: still verify kid on single pub key fetched
This commit is contained in:
Krish Dholakia 2024-03-29 21:08:22 -07:00 committed by GitHub
commit f44df7bed6
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -114,6 +114,7 @@ class JWTHandler:
public_key: Optional[dict] = None
if len(keys) == 1:
if kid is None or key["kid"] == kid:
public_key = keys[0]
elif len(keys) > 1:
for key in keys: