IT13826: ERROR MIGHT HAPPEN WHEN TRYING TO SIGN A JSON WEB TOKEN (JWT) WITH A JSON WEB KEY (JWK)

Fix packs for DataPower Gateway version 7.2

APAR status

• Closed as program error.

Error description

• When a JSON Web Key (JWK) does not contain any of the optional
  parameters:
    p, q, dp, dq and qi
  
  and it is used on Datapower to sign/verify a JSON Web Token
  (JWT), the following error may occur:
  
  20160204T132041.918Z,Test_bed,gatewayscript,error,mpgw,104441
  7,1044417,10.1.x.x,0x85800007 ,,request,"GatewayScript
  processing Error 'ReferenceError: dp is not defined
  
  
  As those parameters are optional, it should not give an error
  if they are not present in the JWK.
  

Local fix

Problem summary

• Affected is use of JSON Web Key (JWK) to sign/verify a JSON Web
  Token (JWT) on DataPower.
  
  When a JSON Web Key (JWK) does not contain any of the optional
  parameters (p, q, dp, dq and qi) and it is used on Datapower to
  sign/verify a JSON Web Token (JWT), an error may occur.
  

Problem conclusion

• Fix is available in 7.2.0.5 and 7.5.0.0
  
  For a list of the latest fix packs available, please see:
  http://www-01.ibm.com/support/docview.wss?uid=swg21237631
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels

• R720 PSY

     UP

• R750 PSY

     UP