RemoteJwkSigningKeyResolver updateKeys() returns null map despite key being retrieved

[okta]

RemoteJwkSigningKeyResolver updateKeys() returns null map despite key being retrieved

[Aniczka]

Thanks! Looks fine! I was surprised too as this would be something very easy to spot!
Let me know when I can pull new library!
Regards,
Ania

[Aniczka]

Hi, can you let me know when this fix is expected to be released?
Thanks!
Ania

[bdemers]

@Aniczka which version of Java are you using (version, vendor, os, etc)?

I want to make sure I can test this correctly.

[Aniczka]

Details:
Java(TM) SE Runtime Environment (build 1.8.0_181-b13)
Java HotSpot(TM) 64-Bit Server VM (build 25.181-b13, mixed mode)
Ubuntu 18.04.3 LTS
Thanks for a quick response!
Ania

[bdemers]

@Aniczka I'm still not sure why this failed for you (that is a pretty common env too, very similar to what we previously used for CI)

Either way, removing that extra .map() step is cleaner, can you take a look at #46 ?

[Aniczka]

Any traction on that? We would like to get a new version that would actually work:/
Thanks!
Ania

[bdemers]

@Aniczka sorry for the delay!!
We just pushed a 0.4.1-SNAPSHOT to https://oss.sonatype.org/content/repositories/snapshots/

Want to give it a quick test? I want to make sure there isn't something else at play here (I wasn't able to reproduce the error)
Let me know and I'll get a release cut.

[Aniczka]

Many thanks! Unfortunately i am getting 403 FORBIDDEN when trying to access URL above.
Request URL:https://oss.sonatype.org/content/repositories/snapshots/
Request Method:GET
Remote Address:54.85.107.240:443
Status Code:
403
Version:HTTP/2.0

[bdemers]

@Aniczka I think it's just the directory listings that are disabled (to prevent crawling/DDOS style attacks) are you able to download the artifacts using maven or gradle?

[Aniczka]

@bdemers yes,i can do that if you can give me details. Thanks so much for your help!

[bdemers]

If you are using Maven, sticking something like this in your ~/.m2/settings.xml should be all you need:

<profiles>
  <profile>
     <id>allow-snapshots</id>
        <activation><activeByDefault>true</activeByDefault></activation>
     <repositories>
       <repository>
         <id>snapshots-repo</id>
         <url>https://oss.sonatype.org/content/repositories/snapshots</url>
         <releases><enabled>false</enabled></releases>
         <snapshots><enabled>true</enabled></snapshots>
       </repository>
     </repositories>
   </profile>
</profiles>

Keep us posted!

[Aniczka]

@bdemers what is artifact id? updated settings and tried okta-jwt-verifier and okta-jwt-verifier-java but didn't work.
Thanks a lot!
Ania

[Aniczka]

i tried that and okta-jwt-verifier jar was downloaded but not impl where the issue was:

<pluginRepositories>
        <pluginRepository>
            <id>snapshots-repo</id>
            <url>https://oss.sonatype.org/content/repositories/snapshots</url>
        </pluginRepository>
    </pluginRepositories>
    <dependencies>
        <dependency>
            <groupId>com.okta.jwt</groupId>
            <artifactId>okta-jwt-verifier</artifactId>
            <version>0.4.1-SNAPSHOT</version>
        </dependency>
        <dependency>
            <groupId>com.okta.jwt</groupId>
            <artifactId>okta-jwt-verifier-impl</artifactId>
            <version>0.4.1-SNAPSHOT</version>
        </dependency>
    </dependencies>

[bdemers]

Try <repositories><repository> instead of <pluginRepositories><pluginRepository>

[Aniczka]

@bdemers one of those 'i swear it wasn't working before!' moments as i tried repositories before resorting to pluginRepositories! got both now and tested and all is working perfectly now!
Thanks so much!
Ania

[bdemers]

Sweet! thanks for following up @Aniczka !