XWeb API Identity Block Causes Wrong Key Pair For OIDC

[andrewpmartinez]

Experienced

If the identity section of a web instance is set, it causes any OIDC APIs on that instance to use the wrong key pair for token signing.

Expected

The right key pairs to be used.

Reproduction

1. Create a controller, ensure that the identity section is set on the web instance under test:

web:
  - name: all-apis-localhost
    bindPoints:
      - interface: 127.0.0.1:1280
        address: 127.0.0.1:1280

        # this section
        identity:
          cert:                 /some/path/to/some/cert.pem
          server_cert:          /some/path/to/some/cert.pem
          key:                  /some/path/to/some/key.pem
          ca:                   /some/path/to/some/cas.pem
    apis:
      - binding: health-checks
      - binding: fabric
      - binding: edge-management
      - binding: edge-client
      - binding: edge-oidc

2. Use OIDC auth