Merge pull request #2762 from jacobnguyenn/update-jwt-auth

fix: still verify kid on single pub key fetched
2024-03-29 21:08:22 -07:00 · 2024-03-29 21:08:22 -07:00 · f44df7bed6
commit f44df7bed6
parent 48ac36e70d 4bf4be3a0f
1 changed files with 2 additions and 1 deletions
--- a/litellm/proxy/auth/handle_jwt.py
+++ b/litellm/proxy/auth/handle_jwt.py
@ -114,7 +114,8 @@ class JWTHandler:
        public_key: Optional[dict] = None

        if len(keys) == 1:
-            public_key = keys[0]
+            if kid is None or key["kid"] == kid:
+                public_key = keys[0]
        elif len(keys) > 1:
            for key in keys:
                if kid is not None and key["kid"] == kid: