search

louketo / louketo-proxy

A OpenID / Proxy service
Apache License 2.0
950 stars 343 forks source link

Missing claim: 'iat' #670

Open vxavictor513 opened 4 years ago

vxavictor513 commented 4 years ago

Missing claim: 'iat'

Summary

I'm using Keycloak Gatekeeper with IdentityServer4 as OIDC provider, and hit the error below.

unable to verify the id token   {"error": "oidc: JWT claims invalid: missing claim: 'iat'"}
Adriien-M commented 4 years ago

I have the same issue, the iat claim is issued only for id_token, for access_token the claim auth_time is used... In the meanwhile, did you find a workaround?

vxavictor513 commented 4 years ago

@Adriien-M: Not really, except a brutal way to suppress the iat error in Gatekeeper, which I'm unsure whether it violates OIDC specs... What about you?