Merge pull request #2762 from jacobnguyenn/update-jwt-auth

fix: still verify kid on single pub key fetched
2026-07-14 07:05:10 +00:00 · 2024-03-29 21:08:22 -07:00
parent 48ac36e70d 4bf4be3a0f
commit f44df7bed6
1 changed files with 2 additions and 1 deletions
@@ -114,7 +114,8 @@ class JWTHandler:
        public_key: Optional[dict] = None

        if len(keys) == 1:
-            public_key = keys[0]
+            if kid is None or key["kid"] == kid:
+                public_key = keys[0]
        elif len(keys) > 1:
            for key in keys:
                if kid is not None and key["kid"] == kid: