Skip to content

JWT authentication on different domains with matching keys fails with error #6736

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Cameronjmayfield opened this issue Feb 6, 2025 · 1 comment

Comments

@Cameronjmayfield
Copy link
Contributor

Cameronjmayfield commented Feb 6, 2025

Describe the bug

JWT authentication on different domains with matching keys fails with error:

{
	"errors": [
		{
			"message": "Invalid issuer: the token's `iss` was 'DOMAIN_ONE', but signed with a key from 'DOMAIN_TWO'",
			"extensions": {
				"code": "AUTH_ERROR"
			}
		}
	]
}

To Reproduce

Steps to reproduce the behavior:

  1. Run identical auth service behind two different domains
  2. Submit authenticated request
  3. See error

Expected behavior

A router running with multiple JWT auth services should support multiple domains with the same keys.

Output

Desktop (please complete the following information):

  • OS: Mac 14.5
  • Version: Rover 0.26.3, Router v1.59.2

Additional context

@Cameronjmayfield Cameronjmayfield changed the title JWT authentication on different domains with matching keys fails with error: JWT authentication on different domains with matching keys fails with error Feb 6, 2025
@theJC
Copy link
Contributor

theJC commented Mar 9, 2025

I believe this should provide a solve for this issue, no?

#6887

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants