Merge pull request #1183 from psteniusubi/fix-signed-jwks-optional-exp

Change to make exp claim optional in signed jwks
OpenIDC · Feb 21, 2024 · 2b3d799 · 2b3d799
2 parents 9f2b11e + a4d9359
commit 2b3d799
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/ChangeLog b/ChangeLog
@@ -1,3 +1,7 @@
+02/21/2024
+- OIDCProviderSignedJwksUri - change to make exp claim optional in signed jwks
+  interop with OpenID Federation specification https://openid.net/specs/openid-federation-1_0-32.html#section-5.2.1 
+
 02/15/2024
 - refactor zlib compression routines and add error checks
 - bump to 2.4.15.4dev

diff --git a/src/metadata.c b/src/metadata.c
@@ -597,7 +597,7 @@ static apr_byte_t oidc_metadata_jwks_retrieve_and_cache(request_rec *r, oidc_cfg
 		}
 
 		// TODO: add issuer?
-		if (oidc_proto_validate_jwt(r, jwt, NULL, TRUE, FALSE, -1) == FALSE)
+		if (oidc_proto_validate_jwt(r, jwt, NULL, FALSE, FALSE, -1) == FALSE)
 			return FALSE;
 
 		oidc_debug(r, "successfully verified and validated JWKs JWT");