Google云端点的自定义安全定义OpenAPI密钥不匹配

Question

试图为Google Cloud Endpoints设置OpenAPI规格时，我无法从Azure AD验证JWT。在查看端点代理日志时，看来无法找到KID = HHBYKU-0DQAQMZH6ZFPD2VWAOTG的键，但是X-Google-JWKS_URI显然包含了该密钥。我想念什么吗？

 "azure_ad": {
       "authorizationUrl": "",
       "flow": "implicit",
       "type": "oauth2",
       "x-google-issuer": "https://sts.windows.net/____/",
       "x-google-jwks_uri": "https://login.microsoftonline.com/common/discovery/v2.0/keys",
       "x-google-audiences": "____"

}

E0906 21:08:43.470441462      12 auth_jwt_validator.cc:570]  Cannot find matching key in key set for kid=HHByKU-0DqAqMZh6ZFPd2VWaOtg and alg=RS256

Answer 1

云端点当前要求" alg"字段必须以jwks格式公开键中。但是我们正在努力解决这个问题。

Answer 2

它在ESP升级到最新版本之后起作用