setKeys not working

[C10ne]

Hi, I'm trying to set public key dynamically, it worked in v1.x.x, but now Lcobucci provider doesn't read the key anymore...

config/jwt.php
'public' => env('JWT_PUBLIC_KEY', 'path/to/public.pem',

AuthServiceProvider.php

...
JWTAuth::getJWTProvider()->setKeys(
                    [
                        'public' => 'file://' . config_path('secret/public_remote.pem'),
                    ]
                );
                $payload = JWTAuth::parseToken()->getPayload();
...

\Lcobucci\JWT\Validation\Validator::validate

\Log::info($constraints);

[2022-09-29 12:39:45] staging.INFO: array (
  0 => 
  Lcobucci\JWT\Validation\Constraint\SignedWith::__set_state(array(
     'signer' => 
    Lcobucci\JWT\Signer\Rsa\Sha256::__set_state(array(
    )),
     'key' => 
    Lcobucci\JWT\Signer\Key\InMemory::__set_state(array(
       'contents' => 'file:///path/to/public.pem',
       'passphrase' => '',
    )),
  )),
)  

When I change the key in config/jwt.php my methods work. What are the changes required to make this work again?

[Messhias]

First, sorry everyone for my absence, but the things here is quite complicated since these things of war, etc...

If I understood the discussion:

And now about your issue, the keys are configured by the config file, if you want to change it dynamically it's required to do it by the runtime.

It's that you want to?

[C10ne]

Hi,
Thanks for your reply.

First, sorry everyone for my absence, but the things here is quite complicated since these things of war, etc...

Sorry to hear that, hope everything will be OK.

It's that you want to?

Yes, I want to change the key in the runtime when remote server tries to connect to my API.

To clarify the problem, I try to do it in runtime, the code:

JWTAuth::getJWTProvider()->setKeys(
                    [
                        'public' => 'file://path/to/public_remote.pem',
                    ]
                );

Used to set the key in runtime, but, after some change to this, or Lcobucci, library, it stopped working.
So, in general, JWTAuth::getJWTProvider()->setKeys() doesn't change the keys that were initially loaded.

I debugged it a bit further, so, probably the issue is that all the classes are singletones, and they don't accept runtime changes to keys.
In the end, I created a new instance of JWTAuth, with new Manager, that initially loads the key I need.

I'll paste entire code fragment, as it might be interesting to someone:

Auth::viaRequest('remote-client', function (Request $request) {
            try {
                $manager = new Manager(
                    new Lcobucci(
                        config('jwt.secret'),
                        config('jwt.algo'),
                        [
                            'public'     => 'file://path/to/public_remote.pem',
                            'private'    => config('jwt.keys.private'),
                            'passphrase' => config('jwt.keys.passphrase'),
                        ]
                    ),
                    app('tymon.jwt.blacklist'),
                    app('tymon.jwt.payload.factory')
                );
                $jwt = new \PHPOpenSourceSaver\JWTAuth\JWTAuth(
                    $manager,
                    app('tymon.jwt.provider.auth'),
                    app('tymon.jwt.parser')
                );
                $jwt->lockSubject(config('jwt.lock_subject'));
                $payload = $jwt->parseToken()->getPayload();
            } catch (\Exception $ex) {
                return null;
            }
            });