kubeguard / guard

🔑 Kubernetes Authentication & Authorization WebHook Server
https://kubeguard.dev
Apache License 2.0
590 stars 81 forks source link

Using issuer url: sts.windows.net #382

Open daveneeley opened 9 months ago

daveneeley commented 9 months ago

I'm trying to set up guard with the Azure provider. I see the below messages repeatedly in the logs.

azure.go:89] Using issuer url: https://sts.windows.net/<my tenant id>/
utils.go:130] failed to verify token for azure: oidc: malformed jwt: square/go-jose: compact JWS format must have three parts

It seems like the issuer should be login.microsoftonline.com, instead of sts.windows.net. What code determines this?

How can I determine what the malformed JWT looks like, so I can address this?