mORMot Open Source

cadnan

Member

From: Sweden

Registered: 2020-09-22

Posts: 9

Parsing JWT from keycloak (custom header)

I am just giving keycloak as an example of a problem.

Keycloak generates a JWT with the following header, for example:

{
  "alg": "RS256",
  "typ": "JWT",
  "kid": "Ov1FFK-avlBR40w6MHNNdCkR5Rl4QcL-STw7h2H11fc"
}

When parsing token this if line is activated in mormot.crypt.jwt, line 1074:

if (toklen <= headerlen) or
    not CompareMem(pointer(fHeaderB64), tok, headerlen) then
    exit;

I suspect that fHeaderB64 is created with the following "template" in mind:

if fHeader = '' then
  FormatUtf8('{"alg":"%","typ":"JWT"}', [aAlgorithm], fHeader);

Any idea what would be a recommended course of action for me here?

Thanks!

cadnan

Member

From: Sweden

Registered: 2020-09-22

Posts: 9

Re: Parsing JWT from keycloak (custom header)

I think I found the solution for this.

Once you instantiate a TJwtCrypt class (or similar) you can set Options to [joHeaderParse].
In case I am doing it wrong, please let me know.

Thanks,
+adnan

ab

Administrator

From: France

Registered: 2010-06-21

Posts: 14,238

Website

Re: Parsing JWT from keycloak (custom header)

This is indeed the way to go with custom/extended headers.