#4572·kratos

当提供者包含 ES256K (Telegram OIDC 中的 secp256k1) 时, JWKS 解析完全失败

作者: SKozak创建于 2026年6月12日更新于 2026年7月8日
标签bug

{ "error": { "debug": "", "message": "The request was malformed or contained invalid parameters", "reason": "failed to verify signature: fetching keys oidc: failed to decode keys: got Content-Type = application/json, but could not unmarshal as JSON: go-jose/go-jose: unsupported elliptic curve 'secp256k1' {\n "keys": [\n {\n "alg": "RS256",\n "e": "AQAB",\n "ext": true,\n "key_ops": [\n "verify"\n ],\n "kty": "RSA",\n "n": "5RneLtsKvVcxdv6gu6gxEQu30Cru5NiMQnY6SNr9ZyZFZ4ya-pfHNuaZXJ6QPG0JSFwoxeOkEO2-eZN_REVPm448PvjjsR1eQdZ5QpEkNxnItFcmxkHH91v5cgf52_EI9BGO-MT6f1vaBSg3uWHFlDxI7J2AYxNvd1_Nf3TkgrrR7gyJFTmEIai5RefGnA0KGNYDlRIGUzrz2F05n6gTaHFT_iHL5UHatTZA4GCiUSjIOuwqu5pE5uZge20TFv3cxXMQaFw_xv1pgQt_Rq8eoCN7TS0RQ0zjWKiad-W286BcFectXsUm03p5Nq_kY4mf_7rqwX_B8yy_bBreyKn7RQ",\n "kid": "oidc-1"\n },\n {\n "alg": "ES256",\n "kty": "EC",\n "x": "ahVYrohhX6YA7w0P2gUNSwMFbaabCgBZFkeq9bWdmwU",\n "y": "Ea8nKJ34VQMA7zv8aYDfzcBhXEjnWQ9C06jVke_eUV0",\n "crv": "P-256",\n "kid": "oidc-es256-1",\n "use": "sig"\n },\n {\n "alg": "EdDSA",\n "crv": "Ed25519",\n "x": "i6BEafXMEe4osXgUTffpKAm6Cn6F2bhqPZoclunTAV4",\n "kty": "OKP",\n "kid": "oidc-eddsa-1",\n "use": "sig"\n },\n {\n "alg": "ES256K",\n "kty": "EC",\n "x": "vsk5i5YJu8H_VPL7DWTgVGXBPrqgkyNmYvfgOrVut38",\n "y": "Ea8nKJ34VQMA7zv8aYDfzcBhXEjnWQ9C06jVke_eUV0",\n "crv": "P-256",\n "kid": "oidc-es256k-1",\n "use": "sig"\n }\n ]\n}\n