fix: "key_ops" is an array, per RFC 7517 #4.3

rolinge · Jul 20, 2021 · 8caaad1 · 8caaad1
1 parent 4aeef70
commit 8caaad1
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/fence/jwt/keys.py b/fence/jwt/keys.py
@@ -188,7 +188,7 @@ def public_key_to_jwk(self):
             except AttributeError:
                 # there is no need to decode values that are already strings
                 pass
-        jwk_dict.update({"use": "sig", "key_ops": "verify", "kid": self.kid})
+        jwk_dict.update({"use": "sig", "key_ops": ["verify"], "kid": self.kid})
         return jwk_dict
 
 

diff --git a/tests/rfc7517/test_jwks.py b/tests/rfc7517/test_jwks.py
@@ -41,7 +41,7 @@ def test_response_values(app, client):
         assert key["alg"] == "RS256"
         assert key["kty"] == "RSA"
         assert key["use"] == "sig"
-        assert key["key_ops"] == "verify"
+        assert key["key_ops"] == ["verify"]
         assert key["kid"] in app_kids
         # Attempt to reproduce the public key from the JWK response.
         key_pem = jwk.construct(key).to_pem().decode("utf-8")