fix(gateway): kid extraction via Header map cast (0.12 has no typed get)
CodeQL Advanced / Analyze (actions) (push) Canceled after 0s
CodeQL Advanced / Analyze (java-kotlin) (push) Canceled after 0s
CodeQL Advanced / Analyze (javascript-typescript) (push) Canceled after 0s
CodeQL Advanced / Analyze (python) (push) Canceled after 0s
Docker Image Build & Push / manifest (push) Canceled after 0s
Docker Image Build & Push / build-and-push-arm (push) Canceled after 0s
Docker Image Build & Push / build-and-push-amd (push) Canceled after 0s
Gateway Docker Image CI / Build and Push Gateway Docker Image (push) Canceled after 0s

This commit is contained in:
figmar
2026-08-31 03:10:35 +08:00
parent 193aad5836
commit 6cae8d4988
@@ -128,7 +128,7 @@ public class CasdoorIdTokenVerifier {
}
private Jws<Claims> parseWithKid(String idToken, Map<String, RSAPublicKey> keys) {
String kid = Jwts.parser().build().parse(idToken).getHeader().get("kid", String.class);
String kid = (String) Jwts.parser().build().parse(idToken).getHeader().get("kid");
RSAPublicKey key = keys.get(kid);
if (key == null) {
log.warn("casdoor jwks: kid [{}] not cached, size={}", kid, keys.size());