{"push_id":2008702805,"size":1,"distinct_size":1,"ref":"refs/heads/support_JWK_keys_without_alg_field","head":"9704433abf93ea5c2b3418d641b8f70d7ae395e1","before":"afab4007ba2f5c092be6fff7313c5d2b55726a5e","commits":[{"sha":"9704433abf93ea5c2b3418d641b8f70d7ae395e1","author":{"name":"Lei Tang","email":"cd04d8df814f82c6b0e4a7f5e28732908c3fa504@google.com"},"message":"Add the support of JWK keys without the alg field\n\n1. Issue description.\nAccording to https://tools.ietf.org/html/rfc7517#page-8, the alg field of JWK keys is optional.\nESP should add the support of JWK keys that do not have the alg field.\n\n2. Issue solution.\nesp/src/api_manager/auth/lib/auth_jwt_validator.cc is revised to add the support of JWK keys that do not have the alg field.\n\n3. Testing the solution.\nA new test case OkTokenJwkNoAlg is added to esp/src/api_manager/auth/lib/auth_jwt_validator_test.cc to test JWK keys without alg field. The new test and the existing tests passed.\nNote: when running \"bazel test //src/... //third_party:all\", please verify that your machine does not have a program occupying the port 8080 (if you have a program already listening on the port 8080, there may be two tests failures: //src/nginx/t:auth_openid and //src/nginx/t:auth_ssl).","distinct":true,"url":"https://api.github.com/repos/lei-tang/esp/commits/9704433abf93ea5c2b3418d641b8f70d7ae395e1"}]}
{"actor":{"display_login":"lei-tang"}}