PyJWK package used by jwt-proxy doesn't support Keycloak RSA-OAEP algorithm in OIDC tokens

[daniellrgn]

PyJWK fails to validate key with RSA-OAEP algorithm used by Keycloak OIDC
Appears to be fixed since PyJWK version 2.5.0 via this change: jpadilla/pyjwt#762

Error:

jwt.exceptions.PyJWKError: Unable to find a algorithm for key: {'kid': 'zqYhkwa0wKoXBTlZaCOikZgiCcIcQapc8tX6RRxJ2BU', 'kty': 'RSA', 'alg': 'RSA-OAEP', 'use': 'enc', 'n': '5u9sxrc_wTdO934LrV7jku3ZlPqMRqtWDwRC31sbeLPeTXo81l7jsLXIx-CSv94xGL7120_QgbO08PeFeZlbfu7yEkEBr9V5N606JBpgLG0y7JyNc_LB_Yi7h0YeH4ogh0Grd1HPg0qGxIZxA7wKPce7XILY0JzohrPVnpDKQYwhKcdhyPOLWkCX9U7AB5r5KLXXzVuOGoCxhBfznLqH0zue69cwWLCNGsX1MehDDT-ql1__lbJ5uYws5TRm8oWUlBvL0KQ1rf7cHXlVGa4Ozt9vf65uQ2Na1URpfCbsmc7mnTe5PnfkP6s4bnFNNz5RsLVTp7GajlsmBbv_fSOc8Q', 'e': 'AQAB', 'x5c': ['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'], 'x5t': '8O9ACe7tP3KiSD16o8omek1NItg', 'x5t#S256': '0F0j6Osn9n1wZu4P0rOklBZctgcFpMly7502WhV9e_Q'}

Using keycloak's RSA1_5 or RSA-OAEP-256 algorithm options also result in this error.

[daniellrgn]

Looks like these algorithms are used after Keycloak v16.0.0