Google 云端点 OpenAPI 密钥不匹配的自定义安全定义

Question

尝试为 Google 云端点设置 OpenAPI 规范时，我无法从 Azure AD 验证 JWT。查看端点代理日志时，似乎找不到 kid=HHByKU-0DqAqMZh6ZFPd2VWaOtg 的密钥，但 x-google-jwks_uri 显然包含该密钥。我错过了什么吗？

 "azure_ad": {
       "authorizationUrl": "",
       "flow": "implicit",
       "type": "oauth2",
       "x-google-issuer": "https://sts.windows.net/____/",
       "x-google-jwks_uri": "https://login.microsoftonline.com/common/discovery/v2.0/keys",
       "x-google-audiences": "____"

}

E0906 21:08:43.470441462      12 auth_jwt_validator.cc:570]  Cannot find matching key in key set for kid=HHByKU-0DqAqMZh6ZFPd2VWaOtg and alg=RS256

Answer 1

Cloud Endpoints 当前要求 "alg" 字段必须以 JWKS 格式 public 键出现。但我们正在努力解决这个问题。

Answer 2

ESP升级到最新版本后有效

Google 云端点 OpenAPI 密钥不匹配的自定义安全定义

Custom Security Definition for Google Cloud Endpoints OpenAPI Key Mismatch

azure

oauth-2.0

google-cloud-endpoints

openapi