stack icon indicating copy to clipboard operation
stack copied to clipboard

Problem with JWT `iss` value

Open widavies opened this issue 8 months ago • 0 comments

Currently, the JWT iss claim is set to:

{
  // ...
  iss: "access-token.jwt-signature.stack-auth.com"
}

This domain is not reachable:

$> nslookup access-token.jwt-signature.stack-auth.com
Server:  one.one.one.one
Address:  1.1.1.1

*** one.one.one.one can't find access-token.jwt-signature.stack-auth.com: Non-existent domain

I think iss should be set to api.stack-auth.com?

The reason this is an issue is because 3rd party services assume that the iss domain is the JWKS domain and can be used to authenticate the JWT.

widavies avatar Apr 26 '25 02:04 widavies