Skip to content

Commit bcdf60e

Browse files
authored
[Access] Remove instructions that required jq and lokey (cloudflare#4077)
1 parent 6f7cdb7 commit bcdf60e

1 file changed

Lines changed: 8 additions & 22 deletions

File tree

content/cloudflare-one/identity/users/validating-json.md

Lines changed: 8 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -23,33 +23,19 @@ You can use the JWT created by Cloudflare Access to validate requests on your or
2323

2424
## Manual verification
2525

26-
{{<Aside>}}
27-
28-
<b>Before you start</b>
29-
30-
Install [`lokey`](https://github.com/jpf/lokey) and [`jq`](https://stedolan.github.io/jq/download/).
31-
32-
{{</Aside>}}
33-
34-
1. Run this command:
35-
36-
```bash
37-
curl -s https://<your team domain>/cdn-cgi/access/certs | jq .keys[0] | lokey to pem -----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01SvMv4TgFIECQgzHaRL DGVaKhRQHjgdiSOpbqhHQMdcNtBIM0HAQbrs7YS6sQCCdZC5wCvlq3xgqdU5J6k YI5OCSsIWXKkobAl6PbXHdN0bJximeiHGa3O0hMREP6RKBoI6ayNmZ3WlVGWY 6ie47KGqN69l7fPKyZvszb4GdpxE0r8gllZZwIuPjzlghXRlrkaP48ucQwo+tq PSSdDdW57TCFmy+G547W5iWZWJIeNkfVu9t6FktvCwSZ1ekum3X7IQcd0O0DWSR Aj9tzNDPkzOeSFxmQkKpWs8Qw7ZBIfLOsO3DCH6VPNhS2cqhw1AAMunh8alDKQU aQIDAQAB -----END PUBLIC KEY-----
38-
```
39-
40-
If an error occurs while running `lokey`, install the [Python six](https://pypi.python.org/pypi/six) library, and try again:
41-
42-
```sh
43-
$ pip install six==1.10.0
44-
```
45-
4626
1. Go to [jwt.io](https://jwt.io/).
4727

4828
1. Select the RS256 algorithm.
4929

50-
1. Paste the JWT into the field on the left.
30+
1. Paste the JWT into the **Encoded** field on the left. Get the `kid` value of the header box on the decoded column.
31+
32+
1. Get your public key:
33+
34+
1. Go to `https://<your team domain>/cdn-cgi/access/certs`.
35+
2. Under `public_certs`, locate the entry with the `kid` value you found in Step #3.
36+
3. Copy the `cert` value.
5137

52-
1. Enter the public key in the **Public Key** field.
38+
1. In the **Verify Signature** box, paste the `cert` value into the **Public Key** field.
5339

5440
1. Ensure that the signature says **verified**.
5541

0 commit comments

Comments
 (0)