dex-app release v3.2.4

Fixed

  • Update dex to v2.43.3. Token exchanges and logins through an OIDC connector no longer hang while the upstream issuer’s signing keys (JWKS) cannot be fetched: the key fetch is bounded to 5 seconds, and such a token exchange answers 503 server_error instead of 401 access_denied, with the keys URL and the failure in Dex’s log. A subject token that does not verify still gets 401 access_denied. See giantswarm/dex#80.