jsonwebtoken.verify method giving error from keycloak token
I use the /auth/realms//protocol/openid-connect/certs endpoint and hardcode the x5c public key returned from this endpoint to try to get this code working (wrapped in BEGIN RSA/END RSA tags) like so:
let x5c = "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";
let pemEncoded = `-----BEGIN RSA PUBLIC KEY-----\n${x5c}\n-----END RSA PUBLIC KEY-----\n`;
const payload = verify(token, pemEncoded, { "algorithms": ["RS256"] }));
But I don't think I've got correct PEM and I've been at it all day trying to find how to setup this certificate for verification. The error says "error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag". The token is valid, but it doesn't like my certificate. Any idea what I've got wrong here?
What's the correct way to pass this certificate to the jsonwebtoken.verify method in this case? Thanks!
Solution
That is certificate, so:
let pemEncoded = `-----BEGIN CERTIFICATE-----\n${x5c}\n-----END CERTIFICATE-----\n`;
- .NET OIDC token mapping different between id_token and userinfo endpoint
- What are the main differences between JWT and OAuth authentication?
- How to resolve TypeScript type error with jwt.sign and Secret in jsonwebtoken?
- jsonwebtoken.verify method giving error from keycloak token
- Could not decode JWT payload from base64
- Why am I getting error in WebSecurityConfig?
- Use multiple JWT Bearer Authentication
- Keycloak Direct Access Grant not valid at keycloak userinfo endpoint
- Entra ID OAuth 2.0 /token request failing using client_assertion
- Why does MSAL AcquireSilent always get a new token even when the current token is valid?
- Token handler unable to convert the token to jwt token
- Generating your OAuth Linkedin token : Oops. We can’t verify the authenticity of your request because the state parameter was modified
- Problems with setting up JWT Bearer authentication in ASP.NET Core
- What characters are allowed in a JWT token?
- JWT Base64 Decode failed in Notepad++
- Getting only decoded payload from JWT in Python
- How do I synchronize JWT between browser tabs of the Flutter web application?
- JWT Cookie Removed After Page Refresh in React App (Frontend Localhost, Backend Server)
- using refresh token to get new access token react and node js
- Generating JWT token with JwtUtil class in Spring Boot resulting in NullPointerException
- How to access Token data from controller method?
- Get JWT claims directly from the token, ASP Net Core 2.1
- Spring Boot - Two Authentication Methods for some paths
- JWT authentication in a Next.js API with the Edge Runtime. JWTClaimValidationFailed: "nbf" claim timestamp check failed
- ASP.NET Core Google Auth with JWT - InvalidOperationException when using SignInAsync
- ECDSA-signed JWT validation failures between .NET and PHP
- The audience is invalid error
- Cannot login and get JWT Token using Haskell Network.HTTP.Simple
- "given_name" not being mapped to claims from JWT in ASP.NET Core 8 application
- jsonwebtoken.sign() function doesn't accept process.expiresIn variable