dex-app release v3.2.4
Fixed
- Update
dextov2.43.3. Token exchanges and logins through an OIDC connector no longer hang while the upstream issuer’s signing keys (JWKS) cannot be fetched: the key fetch is bounded to 5 seconds, and such a token exchange answers503 server_errorinstead of401 access_denied, with the keys URL and the failure in Dex’s log. A subject token that does not verify still gets401 access_denied. See giantswarm/dex#80.