Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issue with IdTokenVerifier cache #1064

Open
actran3 opened this issue Jul 18, 2023 · 0 comments
Open

Issue with IdTokenVerifier cache #1064

actran3 opened this issue Jul 18, 2023 · 0 comments

Comments

@actran3
Copy link

actran3 commented Jul 18, 2023

I filed a ticket with Google Support recently with an issue regarding the CacheLoader in IdTokenVerifier. They there might be issues where a request timeout could result in caching an empty Map instead of a null result.

this.publicKeyCache =
CacheBuilder.newBuilder()
.expireAfterWrite(1, TimeUnit.HOURS)
.build(new PublicKeyLoader(transport));

What I see in my stack is the following

ERROR_MSG=Could not find PublicKey for provided keyId: xxxxxx][STACK=com.google.api.client.auth.openidconnect.IdTokenVerifier$VerificationException: Could not find PublicKey for provided keyId:xxxxxx|	at com.google.api.client.auth.openidconnect.IdTokenVerifier.verifySignature(IdTokenVerifier.java:280)

This error persists for about an hour, before resolving itself. Which is in line with the expiration of the cache.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant