[JIRA] (JOIDC-59) kid missing from id_token header after upgrading from extension

[Patrick Steffes (Jira)]

Patrick Steffes ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A3cb987bc-b688-40c4-8752-e7b0d0298a62 ) *created* an issue

IdP Plugin - OIDC OP ( https://shibboleth.atlassian.net/browse/JOIDC?atlOrigin=eyJpIjoiMDIyYjJkNTFiZmY0NDNhZDk1MThkOWE4Y2NlZDNlMzUiLCJwIjoiaiJ9 ) / Bug ( https://shibboleth.atlassian.net/browse/JOIDC-59?atlOrigin=eyJpIjoiMDIyYjJkNTFiZmY0NDNhZDk1MThkOWE4Y2NlZDNlMzUiLCJwIjoiaiJ9 ) JOIDC-59 ( https://shibboleth.atlassian.net/browse/JOIDC-59?atlOrigin=eyJpIjoiMDIyYjJkNTFiZmY0NDNhZDk1MThkOWE4Y2NlZDNlMzUiLCJwIjoiaiJ9 ) kid missing from id_token header after upgrading from extension ( https://shibboleth.atlassian.net/browse/JOIDC-59?atlOrigin=eyJpIjoiMDIyYjJkNTFiZmY0NDNhZDk1MThkOWE4Y2NlZDNlMzUiLCJwIjoiaiJ9 )

Issue Type: Bug Affects Versions: 3.0.2 Assignee: Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) Created: 01/Nov/21 10:40 AM Priority: Trivial Reporter: Patrick Steffes ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A3cb987bc-b688-40c4-8752-e7b0d0298a62 )

During testing of upgrading the IdP from 4.0.1 to 4.1.4 (and from the geant OIDC extension to 3.0.2 of the plugin) we have noticed that the keyID "kid" is no longer present in the header of our id_token. This is preventing some RPs from being able to identify the correct key as we have multiple listed.

Old header via geant extension:

{ "alg": "RS256", "kid": "shibboleth.umich.edu-1536875061" }

New header with 3.0.2 plugin:

{ "alg": "RS256" }

The underlying jwk file idp-signing-rs.jwk with kid:

{"use": "sig", "e": "AQAB", "d": "<private_key>", "alg": "RS256", "n": "4cNhuZsc20y4nRdE8mhC2H-D4ltiRkaendt09Y8pAIINezKCyzW8aSF0CwptPaGfNIrWFRV1Krn_Wwxoz_Upnmyo9CHLzaFSircoGX1wSHo2auuaduCU67JyFwosC2qMgQUSBQqR8GCbsRqo-ibDe_p4Sl_8sxoRNEr28Ak_BvLsw0rqgs4iAOyF3aAyrQ377wwu6QSM0CzzlBij7ODI3Mt1psJAKwJ7VHHdNV2VhImliA2E96iMlCwI8XBbLo8ud1cKfMHckljahwkjbuIb5XoTJvlMuO4pUB3CxyzQEsIIUO-spSg4EDvsEVCjnrheITgA5hSGMhJ2-3pnMVWqfw", "kty": "RSA", "kid": "shib-idp-staging-sig-rs-1599661708"}

Please let me know what other information I can provide!

( https://shibboleth.atlassian.net/browse/JOIDC-59#add-comment?atlOrigin=eyJpIjoiMDIyYjJkNTFiZmY0NDNhZDk1MThkOWE4Y2NlZDNlMzUiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-59#add-comment?atlOrigin=eyJpIjoiMDIyYjJkNTFiZmY0NDNhZDk1MThkOWE4Y2NlZDNlMzUiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100183- sha1:ce8a569 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20211101/1f2bcffe/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-71420798-a9f3-4023-9692-bb599d35e257
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211101/1f2bcffe/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-f1f2bc8d-0230-4dc2-81db-2a8ee59c6912
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211101/1f2bcffe/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-bdb24011-32ff-4f71-93d1-72c39ffc85de
Type: image/png
Size: 425 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211101/1f2bcffe/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-dda4a967-57c4-4d32-bae1-67a92c655212
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211101/1f2bcffe/attachment-0007.png>