René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"oidcmsg.exception.MissingSigningKey","articleBody":"\r\n![image](https://user-images.githubusercontent.com/1297620/120894009-76d23580-c616-11eb-9fcf-d92b2b7e3c9e.png)\r\n\r\nThat's the log:\r\n````\r\n2021-06-05 15:52:27,643 urllib3.connectionpool DEBUG https://127.0.0.1:8000 \"GET /static/jwks.json HTTP/1.1\" 404 179\r\n2021-06-05 15:52:27,643 cryptojwt.key_bundle WARNING HTTP status 404 reading remote JWKS from https://127.0.0.1:8000/static/jwks.json\r\n2021-06-05 15:52:27,643 cryptojwt.key_bundle ERROR Key bundle update failed: Remote key update from 'https://127.0.0.1:8000/static/jwks.json' failed, HTTP status 404\r\n2021-06-05 15:52:27,644 oidcrp.service ERROR Got exception while verifying response: alg=RS256\r\n2021-06-05 15:52:27,644 oidcrp.oauth2 ERROR alg=RS256\r\n2021-06-05 15:52:27,644 oidcrp.rp_handler ERROR ['Traceback (most recent call last):\\n', '  File \"/home/wert/DEV/IdentityPython/OIDC/env/lib/python3.8/site-packages/oidcrp/oauth2/__init__.py\", line 156, in service_request\\n    response = service.get_response_ext(url, method, body, response_body_type, headers,\\n', \"AttributeError: 'AccessToken' object has no attribute 'get_response_ext'\\n\", '\\nDuring handling of the above exception, another exception occurred:\\n\\n', 'Traceback (most recent call last):\\n', '  File \"/home/wert/DEV/IdentityPython/OIDC/env/lib/python3.8/site-packages/oidcrp/rp_handler.py\", line 489, in get_access_token\\n    tokenresp = client.do_request(\\n', '  File \"/home/wert/DEV/IdentityPython/OIDC/env/lib/python3.8/site-packages/oidcrp/oauth2/__init__.py\", line 91, in do_request\\n    return self.service_request(_srv, response_body_type=response_body_type,\\n', '  File \"/home/wert/DEV/IdentityPython/OIDC/env/lib/python3.8/site-packages/oidcrp/oauth2/__init__.py\", line 159, in service_request\\n    response = self.get_response(service, url, method, body, response_body_type, headers,\\n', '  File \"/home/wert/DEV/IdentityPython/OIDC/env/lib/python3.8/site-packages/oidcrp/oauth2/__init__.py\", line 131, in get_response\\n    return self.parse_request_response(service, resp,\\n', '  File \"/home/wert/DEV/IdentityPython/OIDC/env/lib/python3.8/site-packages/oidcrp/oauth2/__init__.py\", line 212, in parse_request_response\\n    return service.parse_response(reqresp.text, value_type,\\n', '  File \"/home/wert/DEV/IdentityPython/OIDC/env/lib/python3.8/site-packages/oidcrp/service.py\", line 558, in parse_response\\n    resp.verify(**vargs)\\n', '  File \"/home/wert/DEV/IdentityPython/OIDC/env/lib/python3.8/site-packages/oidcmsg/oidc/__init__.py\", line 354, in verify\\n    if not verify_id_token(self, **kwargs):\\n', '  File \"/home/wert/DEV/IdentityPython/OIDC/env/lib/python3.8/site-packages/oidcmsg/oidc/__init__.py\", line 318, in verify_id_token\\n    idt = IdToken().from_jwt(str(msg[claim]), **args)\\n', '  File \"/home/wert/DEV/IdentityPython/OIDC/env/lib/python3.8/site-packages/oidcmsg/message.py\", line 532, in from_jwt\\n    raise MissingSigningKey(\"alg=%s\" % _header[\"alg\"])\\n', 'oidcmsg.exception.MissingSigningKey: alg=RS256\\n']\r\n````\r\n\r\nWe know the nature of this exception, the RP cannot fetch the OP's jwks\r\n````\r\n2021-06-05 15:52:27,643 urllib3.connectionpool DEBUG https://127.0.0.1:8000 \"GET /static/jwks.json HTTP/1.1\" 404 179\r\n2021-06-05 15:52:27,643 cryptojwt.key_bundle WARNING HTTP status 404 reading remote JWKS from \r\n````\r\n\r\nBut I believe that's something that must be improved to UX, they have to understand what's going wrong without being python developers :)\r\n\r\nWhen the error occours we must show to user a clear error message about the cause\r\n\r\n","author":{"url":"https://github.com/peppelinux","@type":"Person","name":"peppelinux"},"datePublished":"2021-06-05T13:58:03.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/44/JWTConnect-Python-OidcRP/issues/44"}