From 986819f99167efccc8c734c057289d5a4c27441d Mon Sep 17 00:00:00 2001 From: phil Date: Fri, 11 Jul 2025 14:31:34 -0400 Subject: [PATCH] put the kid in the header so that later jose knows which key to try (it will not just try them all) --- who-am-i/src/jwt.rs | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/who-am-i/src/jwt.rs b/who-am-i/src/jwt.rs index 625caed..70ad46a 100644 --- a/who-am-i/src/jwt.rs +++ b/who-am-i/src/jwt.rs @@ -74,11 +74,11 @@ impl Tokens { let dt_exp = dt_now + Duration::from_secs(30 * 86_400); let exp = dt_exp.as_secs(); - Ok(encode( - &Header::new(Algorithm::ES256), - &Claims { sub, exp }, - &self.encoding_key, - )?) + let mut header = Header::new(Algorithm::ES256); + header.kid = Some("who-am-i-00".to_string()); + // todo: consider setting jku? + + Ok(encode(&header, &Claims { sub, exp }, &self.encoding_key)?) } pub fn jwk(&self) -> Jwk { -- 2.51.2