Custom Security Definition for Google Cloud Endpoints OpenAPI Key Mismatch

Question

When trying to set up the OpenAPI spec for Google cloud endpoints, I am unable to validate a JWT from Azure AD. When looking at the Endpoints Proxy logs, it appears that a key cannot be found for kid=HHByKU-0DqAqMZh6ZFPd2VWaOtg, however the x-google-jwks_uri clearly has that key included. Am I missing something?

 "azure_ad": {
       "authorizationUrl": "",
       "flow": "implicit",
       "type": "oauth2",
       "x-google-issuer": "https://sts.windows.net/____/",
       "x-google-jwks_uri": "https://login.microsoftonline.com/common/discovery/v2.0/keys",
       "x-google-audiences": "____"

}

E0906 21:08:43.470441462      12 auth_jwt_validator.cc:570]  Cannot find matching key in key set for kid=HHByKU-0DqAqMZh6ZFPd2VWaOtg and alg=RS256

Limin Limin · Accepted Answer · 2017-09-18T21:10:56

Cloud Endpoints currently requires that "alg" field must present in JWKS format public keys. But we are working on fixing the issue.

Custom Security Definition for Google Cloud Endpoints OpenAPI Key Mismatch

2 Answers