From 6cae8d49887471b81ce26d0702e507be85a23b5f Mon Sep 17 00:00:00 2001
From: figmar <figmar@yeah.net>
Date: Mon, 31 Aug 2026 03:10:35 +0800
Subject: [PATCH] fix(gateway): kid extraction via Header map cast (0.12 has no
 typed get)

---
 .../gateway/infrastructure/casdoor/CasdoorIdTokenVerifier.java  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backend/api-gateway/src/main/java/com/deepdata/gateway/infrastructure/casdoor/CasdoorIdTokenVerifier.java b/backend/api-gateway/src/main/java/com/deepdata/gateway/infrastructure/casdoor/CasdoorIdTokenVerifier.java
index 1b98f73..c4c790b 100644
--- a/backend/api-gateway/src/main/java/com/deepdata/gateway/infrastructure/casdoor/CasdoorIdTokenVerifier.java
+++ b/backend/api-gateway/src/main/java/com/deepdata/gateway/infrastructure/casdoor/CasdoorIdTokenVerifier.java
@@ -128,7 +128,7 @@ public class CasdoorIdTokenVerifier {
     }
 
     private Jws<Claims> parseWithKid(String idToken, Map<String, RSAPublicKey> keys) {
-        String kid = Jwts.parser().build().parse(idToken).getHeader().get("kid", String.class);
+        String kid = (String) Jwts.parser().build().parse(idToken).getHeader().get("kid");
         RSAPublicKey key = keys.get(kid);
         if (key == null) {
             log.warn("casdoor jwks: kid [{}] not cached, size={}", kid, keys.size());