BoundedInputStream error when using IDTokenValidator
Issue #196
invalid
Hello there,
I'm attempting to validate an incoming ID Token JWT using the IDTokenValidator. I am running in to a BoundedInputStream error at runtime when creating the validator. The relevant code looks like this:
{code} IDTokenValidator val = new IDTokenValidator( new Issuer(expectedIssuer), new ClientID(expectedClientId), incomingJWTAlgJWS, new URL("https://some.example.com:9031/pf/JWKS"));
I'm fairly new to Java so I could certainly be doing something wrong, but in this case I don't think it's me.
Comments (2)
-
-
- changed status to invalid
No feedback, content at remote URL presumably to big and triggered BIS error (expected behaviour).
- Log in to comment
Hi there,
Could you post the entire stack trace?
This exception typically occurs when the remote JWK set file is too large. This was meant as a safety mechanism, to prevent DoS attacks on IdP and RPs that need to download a remote JWK set.