stack
stack copied to clipboard
Problem with JWT `iss` value
Currently, the JWT iss claim is set to:
{
// ...
iss: "access-token.jwt-signature.stack-auth.com"
}
This domain is not reachable:
$> nslookup access-token.jwt-signature.stack-auth.com
Server: one.one.one.one
Address: 1.1.1.1
*** one.one.one.one can't find access-token.jwt-signature.stack-auth.com: Non-existent domain
I think iss should be set to api.stack-auth.com?
The reason this is an issue is because 3rd party services assume that the iss domain is the JWKS domain and can be used to authenticate the JWT.