throw if JWK not found

zvonand · zvonand · commit b2865fade7dc · 2025-12-03T00:49:10.000+01:00
diff --git a/src/Access/TokenProcessorsJWT.cpp b/src/Access/TokenProcessorsJWT.cpp
@@ -335,6 +335,9 @@ bool JwksJwtProcessor::resolveAndValidate(TokenCredentials & credentials) const
         return false;
     }
 
+    if (!provider->getJWKS().has_jwk(decoded_jwt.get_key_id()))
+        throw Exception(ErrorCodes::AUTHENTICATION_FAILED, "JWKS error: no JWK found for JWT");
+
     auto jwk = provider->getJWKS().get_jwk(decoded_jwt.get_key_id());
     auto username = decoded_jwt.get_payload_claim(username_claim).as_string();
 

Original file line number	Diff line number	Diff line change
`@@ -335,6 +335,9 @@ bool JwksJwtProcessor::resolveAndValidate(TokenCredentials & credentials) const`
`335`	`335`	`return false;`
`336`	`336`	`}`
`337`	`337`
	`338`	`+ if (!provider->getJWKS().has_jwk(decoded_jwt.get_key_id()))`
	`339`	`+ throw Exception(ErrorCodes::AUTHENTICATION_FAILED, "JWKS error: no JWK found for JWT");`
	`340`	`+`
`338`	`341`	`auto jwk = provider->getJWKS().get_jwk(decoded_jwt.get_key_id());`
`339`	`342`	`auto username = decoded_jwt.get_payload_claim(username_claim).as_string();`
`340`	`343`