[Regione Veneto] Anomalia campo iss nei token per alimentazione UAR

[gregoriocanal]

Buongiorno, la presente per segnalare un anomalia nel campo Agid-JWT-Signature e nel bearer token utilizzato dal Broker nell'invocazione del servizio di alimentazione della UAR.

in particolare i token presentano il claim iss valorizzato con "FSE":

"iss": "FSE"

Ci aspetteremmo fosse valorizzato con integrity:S1#111#GOVWAY-EDS-ALIM in accordo all'issuer riportato nel certificato di firma e come previsto da specifiche.

riporto ad esempio di seguito il token jwt Agid-Jwt-signature ricevuto per il wid 2.16.840.1.113883.2.9.2.190203.4.4.12.234a99cf5037aa47a21c4990eb8b01ccbb0f7b578a66737a56f624bd11e6db14.421cf46c9d^^^^urn:ihe:iti:xdw:2013:workflowInstanceId:

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.eyJpYXQiOjE3ODY0MzI5MDEsIm5iZiI6MTc4NjQzMjkwMSwiZXhwIjoxNzg2NDMzMjAxLCJqdGkiOiJkNGFiMDM1Zi05NTUyLTExZjEtYTQwMS0wMDUwNTZhZTczOTUiLCJhdWQiOiJodHRwczovL3Vhci13cy10ZXN0LmF6ZXJvLnZlbmV0by5pdCIsImNsaWVudF9pZCI6IkZTRS9VQVJSRUdfRlNFX3VhcmFsaW1fMDAxIiwiaXNzIjoiRlNFIiwic3ViIjoiR1JMTVNNNjBSMzFGNzcwWV5eXiYyLjE2Ljg0MC4xLjExMzg4My4yLjkuNC4zLjImSVNPIiwic3ViamVjdF9vcmdhbml6YXRpb25faWQiOiIwNTAiLCJzdWJqZWN0X3JvbGUiOiJBQVMiLCJwdXJwb3NlX29mX3VzZSI6IlRSRUFUTUVOVCIsImxvY2FsaXR5IjoiTEFCT1JBVE9SSU8gREkgUFJPVkFeXl5eXiYyLjE2Ljg0MC4xLjExMzg4My4yLjkuNC4xLjMmSVNPXl5eXjExMTEwMTEyMzQ1NiIsInN1YmplY3Rfb3JnYW5pemF0aW9uIjoiUmVnaW9uZSBWZW5ldG8iLCJwZXJzb25faWQiOiJTQ0dTTUQ5N0wwMUw0MjRCXl5eJjIuMTYuODQwLjEuMTEzODgzLjIuOS40LjMuMiZJU08iLCJzaWduZWRfaGVhZGVycyI6W3siZGlnZXN0IjoiU0hBLTI1Nj0rem04czlNc0pESlFsM3ZFenZhUURmSGo2Z0NDYVIwd3lsclBHMzY0NGRRPSJ9LHsiY29udGVudC10eXBlIjoiYXBwbGljYXRpb24vanNvbiJ9XX0.TnqKDupgOI_2c0f5XKu5lLydNCpXOg4ky-q4iniwvX5_ptcYU5i6pC2ex0wPsgM6_Df_oLE5xa0wJDtxGJuwVWGraX1VcsyeEVsTNU5NQxTuJIkPJAxVlmcOiSPWOQDDikCkEEnUJL8l8Nhcih0YvEh58phN3PeTOUKt9es1FwAkSHlbUA7EoqyLmJehYLVYNd_LLV1aCyuWS1VBGbsbIWsmMVZWDnyzDJhMM5bP1i2xGDfyP4PCV3r3WRNaoIVf7_FVJJ-N_aHgwZdLoNroPMpixklo7QH_GRLXhEzNzS9tjtOn2hGnlpdzp3AUYHASvjtGLXWtSGSebDucZ-trNA

vi chiediamo di risolvere l'anomalia

[LucaRogledi]

Buongiorno,
Potrebbe gentilmente riportare la response completa ricevuta dalla chiamata che comprende govway_id e traceId ?
Grazie

[gregoriocanal]

Buongiorno,
l'anomalia sta nella chiamata effettuata da voi verso la nostra uar con i token generati dal broker.

La nostra UAR fornisce in risposta un http status code 401

[gregoriocanal]

aggiungo il body fornito in risposta:
{
"traceID": "df7f38cc3a56446cb201aa7987364370.1786432901764",
"spanID": "3e59de1bd057487b95e234b116223dcb.1786432901764",
"type": "/err/Authentication",
"title": "Authentication error",
"detail": "Invalid Agid-JWT-Signature",
"status": 401,
"instance": "/err/Authentication"
}