[keycloak-user] Keycloak Express middleware VS self signed cert

[Ali Ok]

Resending, after subscribing to Keycloak user list

----------------------------------

(also adding Keycloak ML)

Hi,
I am trying to integrate a Node application with a Keycloak instance
running on my local OpenShift cluster.

Node app uses the Keycloak client in this Gist: [1]
Here is the keycloak.json file used in Node app: [2]


When I pass a valid token to the Node app, Keycloak middleware on the Node
app side is trying to get the public key from Keycloak, I see there is
"self signed certificate in certificate chain" error when Keycloak lib
tries to do this:
"

// retrieve public KEY and use it to validate token
this.rotation.getJWK(token.header.kid).then(key => {

"
here: https://github.com/keycloak/keycloak-nodejs-connect/blob/
master/middleware/auth-utils/grant-manager.js#L359

2 questions:
- How can I configure client and the Node app to have the public key
already, so that it doesn't go and fetch the public key?
- If question above doesn't make sense (I can be considered a beginner in
this area), how can I make middleware to work with a self signed cert
Keycloak instance?

I prefer the first approach.

Thanks,
Ali

[1]: https://gist.github.com/aliok/8ae2c9d240d09367b59e491677400a96
[2]: https://gist.github.com/aliok/23e93794847ef3493893627ca68e9650