JWT verifier shows Invalid URL. about okta-jwt-verifier-php HOT 6 CLOSED

@rdkls thank you for the additional information here. I will add this to be investigated.

from okta-jwt-verifier-php.

@rdkls I have pushed an update to develop that will throw a Domain exception if there is no jwks_uri in the metadata.

#50

from okta-jwt-verifier-php.

Thanks.
What is process to update package list?
Still pointing to 1.0 here
https://packagist.org/packages/okta/jwt-verifier

thanks

from okta-jwt-verifier-php.

@elmacho777 can you please go into more detail of what is showing you that error? I am confused by where that error is coming from.

from okta-jwt-verifier-php.

I just had exactly the same issue. It happens if you're not paying for / using a customer auth server, as only custom auth servers metadata contain jwks_uri.

The problem is in JwtVerifier.php __construct
It retrieves metadata like so:
$this->metaData = json_decode($request->setUrl($this->issuer.$this->discovery->getWellKnown())->get()->getBody());

And just assumes the response contains jwks_uri. Which it only does for custom auth servers i.e. your base uri is of form https://${yourOktaDomain}/oauth2/${authServerId} NOT https://${yourOktaDomain}/oauth2

Then, in verify() it attempts to retrieve the (null) jwks_uri and gets that error
Traceback like so:

[16-Jul-2020 07:11:58 UTC] PHP Fatal error:  Uncaught InvalidArgumentException: URI must be a string or UriInterface in (php-dir)/vendor/guzzlehttp/psr7/src/functions.php:62
Stack trace:
#0 (php-dir)/vendor/php-http/message/src/UriFactory/GuzzleUriFactory.php(20): GuzzleHttp\Psr7\uri_for(NULL)
#1 (php-dir)/vendor/okta/jwt-verifier/src/Request.php(65): Http\Message\UriFactory\GuzzleUriFactory->createUri(NULL)
#2 (php-dir)/vendor/okta/jwt-verifier/src/Adaptors/FirebasePhpJwt.php(39): Okta\JwtVerifier\Request->setUrl(NULL)
#3 (php-dir)/vendor/okta/jwt-verifier/src/JwtVerifier.php(94): Okta\JwtVerifier\Adaptors\FirebasePhpJwt->getKeys(NULL)
#4 (php-dir)/index.php(447): Okta\JwtVerifier\JwtVerifier->verif in (php-dir)/vendor/guzzlehttp/psr7/src/functions.php on line 62

from okta-jwt-verifier-php.

Internal Ref: OKTA-314097

from okta-jwt-verifier-php.