Kid in JWE using Key Wrapping mode is unknown
What did you do?
Ran the basic oidcc-client-test certification test
What did you expect would happen?
The test to pass
What did happen?
The test failed on the RP. The id_token is correctly encrypted using key wrapping mode (A256KW), but a uuid based (or similar) kid is supplied. The RP can not locate the key based on the kid because the key is a derivative of the client_secret. So unless there is a deterministic way the kid should be derived from the client_secret derived key (on both sides), should the kid be supplied?
https://www.certification.openid.net/log-detail.html?log=J5Bg6JviClNMuRE