bug: error configuring public_key in `openid-connect` plugin

[hnlzwaq]

Current Behavior

对public-key进行了各种设置，都无法离线验证jwt token
第一种直接设置公钥，不行
第二种在公钥前后增加 -----BEGIN PUBLIC KEY----- ，还是不行
第三种对公钥做base64转换还是不行

Expected Behavior

我期望设置一个公钥字符串就可以验证通过，可是怎么样都不行

希望作者对public_key有明确的定义说明

Error Logs

No response

Steps to Reproduce

最后的解决办法是，
增加了一个 "public_key_from_odic": true, 替换了"public_key"参数，
同时修改了 脚本 openid-connect.lua 中的第182行 if conf.public_key_from_odic then ，
目前公钥从openId-connect中心获取，完美解决问题

Environment

• APISIX version (run apisix version):
• Operating system (run uname -a):
• OpenResty / Nginx version (run openresty -V or nginx -V):
• etcd version, if relevant (run curl http://127.0.0.1:9090/v1/server_info):
• APISIX Dashboard version, if relevant:
• Plugin runner version, for issues related to plugin runners:
• LuaRocks version, for installation issues (run luarocks --version):

[tzssangglass]

对public-key进行了各种设置，都无法离线验证jwt token
第一种直接设置公钥，不行
第二种在公钥前后增加 -----BEGIN PUBLIC KEY----- ，还是不行
第三种对公钥做base64转换还是不行

see:

apisix/t/plugin/openid-connect.t

Lines 462 to 507 in ccd70df

	=== TEST 13: Update plugin with ID provider public key, so tokens can be validated locally.
	--- config
	location /t {
	content_by_lua_block {
	local t = require("lib.test_admin").test
	local code, body = t('/apisix/admin/routes/1',
	ngx.HTTP_PUT,
	[[{ "plugins": {
	"openid-connect": {
	"client_id": "kbyuFDidLLm280LIwVFiazOqjO3ty8KH",
	"client_secret": "60Op4HFM0I8ajz0WdiStAbziZ-VFQttXuxixHHs2R7r7-CW8GR79l-mmLqMhc-Sa",
	"discovery": "https://samples.auth0.com/.well-known/openid-configuration",
	"redirect_uri": "https://iresty.com",
	"ssl_verify": false,
	"timeout": 10,
	"bearer_only": true,
	"scope": "apisix",
	"public_key": "-----BEGIN PUBLIC KEY-----\n]] ..
	[[MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANW16kX5SMrMa2t7F2R1w6Bk/qpjS4QQ\n]] ..
	[[hnrbED3Dpsl9JXAx90MYsIWp51hBxJSE/EPVK8WF/sjHK1xQbEuDfEECAwEAAQ==\n]] ..
	[[-----END PUBLIC KEY-----",
	"token_signing_alg_values_expected": "RS256"
	}
	},
	"upstream": {
	"nodes": {
	"127.0.0.1:1980": 1
	},
	"type": "roundrobin"
	},
	"uri": "/hello"
	}]]
	)
	if code >= 300 then
	ngx.status = code
	end
	ngx.say(body)
	}
	}
	--- request
	GET /t
	--- response_body
	passed
	--- no_error_log
	[error]

[ipanocloud]

遇到了同样的问题

[ipanocloud]

对public-key进行了各种设置，都无法离线验证jwt token
第一种直接设置公钥，不行
第二种在公钥前后增加 -----BEGIN PUBLIC KEY----- ，还是不行
第三种对公钥做base64转换还是不行

see:

apisix/t/plugin/openid-connect.t

Lines 462 to 507 in ccd70df

	=== TEST 13: Update plugin with ID provider public key, so tokens can be validated locally.
	--- config
	location /t {
	content_by_lua_block {
	local t = require("lib.test_admin").test
	local code, body = t('/apisix/admin/routes/1',
	ngx.HTTP_PUT,
	[[{ "plugins": {
	"openid-connect": {
	"client_id": "kbyuFDidLLm280LIwVFiazOqjO3ty8KH",
	"client_secret": "60Op4HFM0I8ajz0WdiStAbziZ-VFQttXuxixHHs2R7r7-CW8GR79l-mmLqMhc-Sa",
	"discovery": "https://samples.auth0.com/.well-known/openid-configuration",
	"redirect_uri": "https://iresty.com",
	"ssl_verify": false,
	"timeout": 10,
	"bearer_only": true,
	"scope": "apisix",
	"public_key": "-----BEGIN PUBLIC KEY-----\n]] ..
	[[MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANW16kX5SMrMa2t7F2R1w6Bk/qpjS4QQ\n]] ..
	[[hnrbED3Dpsl9JXAx90MYsIWp51hBxJSE/EPVK8WF/sjHK1xQbEuDfEECAwEAAQ==\n]] ..
	[[-----END PUBLIC KEY-----",
	"token_signing_alg_values_expected": "RS256"
	}
	},
	"upstream": {
	"nodes": {
	"127.0.0.1:1980": 1
	},
	"type": "roundrobin"
	},
	"uri": "/hello"
	}]]
	)
	if code >= 300 then
	ngx.status = code
	end
	ngx.say(body)
	}
	}
	--- request
	GET /t
	--- response_body
	passed
	--- no_error_log
	[error]

"public_key": "-----BEGIN PUBLIC KEY-----\n]] .. [[MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANW16kX5SMrMa2t7F2R1w6Bk/qpjS4QQ\n]] .. [[hnrbED3Dpsl9JXAx90MYsIWp51hBxJSE/EPVK8WF/sjHK1xQbEuDfEECAwEAAQ==\n]] .. [[-----END PUBLIC KEY-----",
这里[[\n]] 能代表什么意思呢

[ipanocloud]

"public_key": "-----BEGIN PUBLIC KEY-----MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9jEbKgIL0Pu9suixeV+y+vxUOb9TOTd/sUckg+xCqfsRubGjFlyLn/pRXa5fn7+uD+m/S3SMoSlJSBKKMcEMGGFUIHmjuD9CI3yO918RpM6o/+g658P0p//t5BtinyPBgjAzxJQ6orUOTMsLlksQh9eMEHcw1FmG10n8uoihtcP8kgjCs2IL//CSC8NaDVvDlC3b11eafCyvxvv92GAXH1g9XoK8jGD8VvhvQhUso19bFyvxuBIeFqTLKfULIC8xxMPgoAAklXjYZVnPtGCsIVHRlmwuljCTvrJphDqbtPRuVuFbUhp0aKDfsTKZeFErJ0oUCzdjo8tA5kb+6cpDwIDAQAB-----END PUBLIC KEY-----",
这种格式无法识别嘛 ？

[tzssangglass]

这里[[\n]] 能代表什么意思呢

line break

[datavisorzhizhu]

Given a public key, how to get the format presented in test cases?
I tried several ways to break a public key into the format presented in test cases, but failed
@tzssangglass

[kayx23]

does this issue still remain?