starred/pocket-id-pocket-id-1
1
0
Fork 0
mirror of https://github.com/pocket-id/pocket-id.git synced 2025-12-11 07:42:58 +03:00
Code Issues 122 Packages Projects Releases 10 Wiki Activity

🐛 Bug Report: Integration with EspoCRM fails due to missing KID in the jwks.json #475

New Issue
Closed
opened 2025-10-08 00:10:18 +03:00 by OVERLORD · 1 comment
OVERLORD commented 2025-10-08 00:10:18 +03:00
Owner
Copy Link

Originally created by @redispade on GitHub.

Reproduction steps

I added pocket-id as OIDC provider in EspoCRM. It authenticates the user but when returning to Espo then fails with a 500 error.
You can replicate this with your own selfhosted espocrm instance or reach out to me for testing.

Expected behavior

.well-known/jwks.json should have the KID value(but I don't know how exactly that works)

Actual Behavior

I enabled debugging in Espo and I get this:
[2024-10-08 11:11:05] CRITICAL: (0) Bad JWK value. :: GET /App/user :: /var/www/html/application/Espo/Core/Authentication/Jwt/Keys/Rsa.php(56)

which goes down to this line of code that checks if any of the values (KID or KTY) are missing
9613437895/application/Espo/Core/Authentication/Jwt/Keys/Rsa.php (L56)

I checked the json on my instance and indeed it's missing KID value(KTY is present as RSA)

Originally created by @redispade on GitHub. ### Reproduction steps I added pocket-id as OIDC provider in EspoCRM. It authenticates the user but when returning to Espo then fails with a 500 error. You can replicate this with your own selfhosted espocrm instance or reach out to me for testing. ### Expected behavior .well-known/jwks.json should have the KID value(but I don't know how exactly that works) ### Actual Behavior I enabled debugging in Espo and I get this: `[2024-10-08 11:11:05] CRITICAL: (0) Bad JWK value. :: GET /App/user :: /var/www/html/application/Espo/Core/Authentication/Jwt/Keys/Rsa.php(56)` which goes down to this line of code that checks if any of the values (KID or KTY) are missing https://github.com/espocrm/espocrm/blob/96134378955a47ef1359ec38e3c755eeeff9bc5f/application/Espo/Core/Authentication/Jwt/Keys/Rsa.php#L56 I checked the json on my instance and indeed it's missing KID value(KTY is present as RSA)
OVERLORD added the bug label 2025-10-08 00:10:18 +03:00
OVERLORD commented 2025-10-08 00:10:22 +03:00
Author
Owner
Copy Link

@stonith404 commented on GitHub:

Thanks for reporting. This should be fixed in v0.8.1.

@stonith404 commented on GitHub: Thanks for reporting. This should be fixed in `v0.8.1`.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
breaking
bug
documentation
feature
needs more upvotes
open to pull requests
pull-request
Mirrored from GitHub Pull Request
No Label bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
OVERLORD
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/pocket-id-pocket-id-1#475
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?