Catch no jwk found to check signiture against

samuelwei · samuelwei · commit 06febbdd3426 · 2025-06-30T17:49:31.000+02:00
diff --git a/src/OpenIDConnectClient.php b/src/OpenIDConnectClient.php
@@ -1250,6 +1250,10 @@ public function verifyJWS(JWS $jws): bool
                 throw new OpenIDConnectClientException('No support for signature type: ' . $alg);
         }
 
+        if ($jwk === null) {
+            throw new OpenIDConnectClientException('Unable to find JWK for algorithm: ' . $alg);
+        }
+
         return $jwsVerifier->verifyWithKey($jws, $jwk, 0);
     }
 

Original file line number	Diff line number	Diff line change
`@@ -1250,6 +1250,10 @@ public function verifyJWS(JWS $jws): bool`
`1250`	`1250`	`throw new OpenIDConnectClientException('No support for signature type: ' . $alg);`
`1251`	`1251`	`}`
`1252`	`1252`
	`1253`	`+ if ($jwk === null) {`
	`1254`	`+ throw new OpenIDConnectClientException('Unable to find JWK for algorithm: ' . $alg);`
	`1255`	`+ }`
	`1256`	`+`
`1253`	`1257`	`return $jwsVerifier->verifyWithKey($jws, $jwk, 0);`
`1254`	`1258`	`}`
`1255`	`1259`