You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@knox.apache.org by "Philip Zampino (Jira)" <ji...@apache.org> on 2021/03/31 16:50:00 UTC

[jira] [Created] (KNOX-2566) JWT Token Signature Verification Caching NPE

Philip Zampino created KNOX-2566:
------------------------------------

             Summary: JWT Token Signature Verification Caching NPE
                 Key: KNOX-2566
                 URL: https://issues.apache.org/jira/browse/KNOX-2566
             Project: Apache Knox
          Issue Type: Bug
          Components: Server
    Affects Versions: 1.6.0
            Reporter: Philip Zampino
            Assignee: Philip Zampino


For JWT tokens that have not been issued by Knox, but which Knox can verify, the signature verification caching enhancement in the JWT providers (KNOX-2544) throws a NPE because it's assuming that all JWTs have been issued by Knox and have a Knox-token-specific claim.

The providers should be able to handle these cases without throwing an exception.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)