Error with OpenLogin: 404 invalid public key

Help - Plug n Play
1

Hello,
I have been encountering the same error for hours and I can’t find a solution.
I use NextJs framework, when I initialize web3auth, I get a 404 error (invalid public key) from torus.
I have created several verifiers but nothing changes, even when I put verifier names that do not exist. I have changed several times from version 5.1 → 4.6. I have enabled popups and redirects but nothing works.

When I try to connect via the popup it remains white and nothing happens. I use webpack 5 but it seems that there is no fix with NestJs.

Thanks you

const web3auth = new Web3AuthNoModal({
    clientId,
    chainConfig: {
      chainNamespace: CHAIN_NAMESPACES.EIP155,
      chainId: '0x1', // EVM chain's Chain ID
      rpcTarget: 'https://rpc.ankr.com/eth', // EVM chain's RPC endpoint
      // Avoid using public rpcTarget in production.
      // Use services like Infura, Quicknode, Alchemy, Ankr etc.
      displayName: 'Ethereum Mainnet', // EVM chain's Name
      blockExplorer: 'https://etherscan.io/', // EVM chain's Blockexplorer
      ticker: 'ETH', // EVM chain's Ticker
      tickerName: 'Ethereum', // EVM chain's Ticker Name
    },
  });

  const openloginAdapter = new OpenloginAdapter({
    adapterSettings: {
      network: 'testnet',
      uxMode: 'popup', // also support popup
      loginConfig: {
        jwt: {
          name: 'Bifrost Web3Auth',
          verifier: 'bifrost-web3auth-demo',
          typeOfLogin: 'jwt',
        },
      },
    },
  });
  web3auth.configureAdapter(openloginAdapter);

  await web3auth.init();

  await web3auth.connectTo(WALLET_ADAPTERS.OPENLOGIN, {
    loginProvider: 'jwt',
    extraLoginOptions: {
      id_token: access_token,
      verifierIdField: 'sub',
    },
  });

image
image928×399 64 KB

image
image1028×220 38.8 KB

2

Hey @alexandrepe

You’re passing access_token in the extraLoginOptions. It should be an id_token (JWT) you generate/obtain from the login provider.

Also, the error you’re getting in the network call is different.

3

Hi @shahbaz !

access_token come from my custom JWT auth, I used jwonwebtoken nodejs package to sign it, here is an example token signed with my private key. When I check the jwt with my JWK, signature is verified.

const access_token = getAccessFromResponse(
    await apiClient.post<unknown>(ApiRoutes.login, data),
  );

image
image1264×1027 139 KB

Also even if I comment this part of the code (connection), I get the 404 error.

image
image1353×585 132 KB

It’s really problematic, I have to make a presentation in my company of this solution in 3 hours but if I can’t do it I will have to present MagicLink instead

4

Here, you’re referring to id_token as access_token. I got confused.

Can you share how you are generating the token? Also, please share your jwks endpoint here

5

Sure.

Here is my JWKS endpoint: https://raw.githubusercontent.com/PeaX10/bifrost-web3auth/main/apps/backend/public/jwks.json

To generate my token I use JwtModule from Nest which use jsonwebtolen.
Here is my AuthModule :

@Module({
  imports: [
    PassportModule.register({ defaultStrategy: 'jwt' }),
    JwtModule.registerAsync({
      useFactory: () => ({
        privateKey: fs.readFileSync('./keys/private.pem'),
        publicKey: fs.readFileSync('./keys/public.pem'),
        signOptions: {
          expiresIn: 3600,
          audience: 'bifrost-web3auth',
          algorithm: 'RS256',
          keyid: 'web3auth',
        },
      }),
    }),
    UserModule,
  ],
  controllers: [AuthController],
  providers: [AuthService, JwtStrategy, { provide: APP_GUARD, useClass: CustomAuthGuard }],
})
export class AuthModule {}

The function who create JWT :

private createJwt(user: User, minutesToLive: number, type: TokenType): string {
    const token = this.jwtService.sign({ sub: user.id, type }, { expiresIn: minutesToLive * 60 });

    this.logger.log(`token created, type ${type}, value ${token}`);

    return token;
  }
6

Have you created this verifier on the web3auth dashboard?

Visit Bring your own custom JWT Providers | Documentation to learn how

7

Ofc

image
image1954×838 44.7 KB

8

In the documentation I found this example :

{
  "keys": [
    {
      "kty": "RSA",
      "kid": "1bb9605c36e{your_kid}69386830202b2d",
      "use": "sig",
      "alg": "RS256",
      "n": "0x{your_n}",
      "e": "0x{your_e}"
    }
  ]
}

Do I need to name my kid with 1bb9605c36e{your_kid}69386830202b2d ?
for example if in my token kid is test do I need to name kid 1bb9605c36etest69386830202b2d in the jwks ?

Also, in my JWK n and e don’t start with 0x, do I need to convert my current value ?

Here is my JWKS :

{
      "kty": "RSA",
      "e": "AQAB",
      "use": "sig",
      "kid": "web3auth",
      "n": "rbPDa0AEinT2w0WHTkpdD8hyZ7SE-ROnzCAacTU_S-PV0IYPgS5OE_e1c6ioAYnEpAdccNxVRGpjc27ypFDK8PKn9C_1stp8m5rmE8dzbKcITO1SB1rsDxYLn2UNZpVhK3awi-jj9kEmA9wHIllX407iqEpWvhd5PyextFCS3Txb_jEL5ngS82ZN2cDpOiSpDqAi4ocQMqZYykh-x6GUPwx7zZMRbCdVrjny8hA6n50YGHydOwqu19gGqlqEklqwacKCfnaq1eAOmzc_pyO2lqaqLsymuC9kvF_ax09FhskeKvM7sVsi78IAcnRUPawMxzHx6TPnt7t1uSy9YGWX0hluybWswaEDRiBCobmx6A6v2PcGMK7swb_hMDZlhVU8_1wDCnH0VbNUsff7DTdGlQd1Z8hUQuG8oygzkwPThuA-cWSQipFX3Eo-yALtLORVkOkU1OaL25uiWKtFM25jO5iXzcHnYhXjx5TPfoX7oCDP5G24iDuZ_SaFk3QYJlUu8BJx86XY0Kn0dltbnqmBqEYF88h-U8ET_BJihJ0rj7FZ_pOs-1GQRb0IkuEe0_WH0tVpDAEMhwPyAuaRXfudx0HPep16nEiXtChRyU7W87FtI5cDt_6fAAkaf4VKt1o1PMsHAIsrJPA_yasQcDsdKRRLSBERuq00IGwlWcxsJwU",
      "alg": "RS256"
    }
9

Thanks for sharing!

By looking closely at JWKS, I see that your e field has 0xAQAB. Can you share a sample id_token here?

Also, how did you convert your public.pem file to JWKS?

10

Screenshot 2023-04-25 at 1.00.14 PM
Screenshot 2023-04-25 at 1.00.14 PM2444×620 113 KB

11

Yes i tried with 0x, but it’s does’nt work too.
I used an online converter to do this. You can check my JWK on jwt.io it’s working fine.

image
image1230×1000 134 KB

Here is a sample : eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IndlYjNhdXRoIn0.eyJzdWIiOiJmMzVmM2UzNS1lZWIwLTQ1N2UtYjUyMC00YzRhMGUzMzQ2N2IiLCJ0eXBlIjoicmVmcmVzaCIsImlhdCI6MTY4MjM3NTAwMywiZXhwIjoxNzEzOTExMDAzLCJhdWQiOiJiaWZyb3N0LXdlYjNhdXRoIn0.V1DJW_uJb4-2H5ltUQvWvANgNEWgiUPch9uYQalqq79cgL5TFcE_wDIkaIf9TxfujTlHKBzoF4pChBYhONUnVdQau5tGwRDg6SJjlhM3NiY7cRxY53EjY8K4TaqxcSvAR7pjhNMCpOTYyjeUQ3tem6i7MTivDWn5L9f3VbrU1zbSuUxCLZzpWN1XljlFPz3g6vsdVU38xwM4FKyBOhvH_6FeIs2RPdnHLI8H0ypEWCXVu_HhlH1Ow1LWKPYqU__9MdQaq4w9i-Ljivc3xC-K3DklYeoGbbI5lz6EU5XTT68DjV-xb_N7QxJp5vMu8cdRyTqVN0VhkQvtvE3SbTPVpVv-rYBnnbKF723GGVot67_th6TWOBS30oOaCCX2vBNfELUWkBJmB7rEzfn_Iu3_0_v4pw7Dw6WsFkX0g_TIES4falRZrkwDOZhBZasMipW3JTdLSk5tLNelKWoXbfESw0m3e6aVHaqDglo48tVbDwLV_3mzxrbGF-5tKYJ9muvuZUwLKh5Q97qAfNesGv0yrdJCPeNGAmpUSG09VBenkpqjd6ZQjLTt0hEwz6grfzwYUdsq-8l05LjyXj_K3bVVOc_JqbEqfjnFon8hUKWkAT82aKdFn7-MMb9JdG5BJxbfnrOyGL9g4t-eQgwnSi5xNOzlsxn4UcVe2GCD_rxvwo4

12

Looks like you updated jwks again, without 0x. It should be working by now.

What’s the error you are getting in the browser console?

13

At the beginning there were no 0x

Always the same error:

image
image1920×1201 138 KB

In the popup window :

image
image1794×1820 327 KB

14

Hey @alexandrepe

Can you share the full initialization and login code snippet here? Looks like it’s missing a param.

Please try adding clientId to jwt and try again. Also, can you expand Object after OpenLogin - RPC Error: Invalid params and share that too?

1 Like
15

It’s working ! Thx u :pray:

1 Like
16

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.