throw error "No KID specified"

okta · Dec 14, 2020 · 1b0d70e · 1b0d70e
1 parent cb38eca
commit 1b0d70e
Showing 1 changed file with 7 additions and 7 deletions.
diff --git a/packages/jwt-verifier/lib.js b/packages/jwt-verifier/lib.js
@@ -138,13 +138,13 @@ class OktaJwtVerifier {
       rateLimit: true
     });
     this.verifier = nJwt.createVerifier().setSigningAlgorithm('RS256').withKeyResolver((kid, cb) => {
-      this.jwksClient.getSigningKey(kid, (err, key) => {
-        // If kid is undefined, but there is 1 signing key, `jwks-rsa` will not throw error
-        if (!kid)
-          err = new Error(`Error while resolving signing key for kid "${kid}"`);
-
-        cb(err, key && (key.publicKey || key.rsaPublicKey));
-      });
+      if (kid) {
+        this.jwksClient.getSigningKey(kid, (err, key) => {
+          cb(err, key && (key.publicKey || key.rsaPublicKey));
+        });
+      } else {
+        cb("No KID specified", null);
+      }
     });
   }