[IMPALA-12558] JSON Web Keys (JWK) Must Not Require the Optional alg Property

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Component/s: Backend, Security
• Labels: JWT jwt security
• Epic Color: ghx-label-7
• Assignee: gaurav singh
• Reporter: Jason Fehr
• Created: 14/Nov/23 00:27
• Updated: 16/Jul/24 23:55
• Resolved: 27/Jun/24 14:29

Description

According to the JWK RFC, the "alg" property is optional on JWKs.

Update Impala so that the "alg" property is no longer required on the JWKs.

Issue Links

• is related to: IMPALA-12560 Document Impala Limitations for JWT Auth