Allow empty Key-ID / kid if only a single key is published

scitokens / scitokens-cpp

A C++ implementation of the SciTokens library with a C library interface

Apache License 2.0

5 stars 22 forks source link

Allow empty Key-ID / kid if only a single key is published #55

Closed olifre closed 2 years ago

olifre commented 3 years ago

When kid is not set and only a single key is published, fall back to using this single key.

This expands upon #7 (and pulls in the commit part of that PR) and adds a modification to find_key_id to deal with an empty kid. Adresses parts of the issues observed in #53 .

bbockelm commented 2 years ago

@djw8605 - I think I'm OK with this given the obvious caveats of allowing slightly-non-standard behavior. @jbasney - can you see any downsides?