Hi! The library I’m trying to use is not able to decode JWK key because x5t field value is longer than 20 bytes. This is what I get from .well-known/jwks.json "x5t":"RTBFQjE3MEU0QjQ2M0FCNkYxRTEwMUIwNTJFOUY1NDgyMjgzRTI1NQ" When decoded the value is E0EB170E4B463AB6F1E101B052E9F5482283E255 which …

Hi all, I posted in another thread that we have a fix for this now: [image] JWK Certificate thumbprint is invalid Help Hi everyone, I’m happy to report that today we released Singing Key Rotation, which includes a path for fixing the x5t value in your JWK: Your exist…

Just wanted to let you know we are reviewing this; at first glance, this may indeed be an issue, but I’ll keep you posted when I have more concrete information.

@jmangelo Is there any progress on this issue? I’m running into this issue now as well.

Nothing useful; the situation was reported and is being tracked in the backlog but there’s nothing concrete to share I’m afraid. I will relay that the problem has been also experienced by additional users and not just the OP.

Sorry for missing this comment; I have to confess that at that time I was offline and when I got back online did not have the possibility to go through all the notifications.

I ended up writing code to decode the base64 and hex encodings and reencode the field correctly so that my library could consume it. It really does seem that auth0 does not fit the spec.

[image] RFC 7517: JSON Web Key (JWK) A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. This specification also defines a JWK Set JSON data structure that represents a set of JWKs. Cryptographic algorithms and identifiers for..…

I kind of don’t appreciate that I have to write a hack to get my JWT library to work with auth0.

Thanks a lot for that @matt.macadam !

Certificate thumbprint is longer than 20 bytes

Get Help

selenarakowski September 14, 2017, 12:39am 3

I am running into this problem as well. Would love to know what the status of this is.

Topic		Replies	Views
JWK Certificate thumbprint is invalid Get Help jwt , jwks , certificate	21	10704	April 23, 2020
Invalid JWKS certificate JWT.io jwks , certificate , x509	4	5899	November 2, 2019
X509 Certificate validity in JWK JWT.io	6	4842	April 3, 2020
JWK is not verified in debugger Get Help jwks , x509 , pem	10	2392	November 16, 2022
Problem validating JWT with x5c public key from Microsoft Get Help jwt , auth0	3	4493	February 25, 2021

Certificate thumbprint is longer than 20 bytes

Related topics