File tree Expand file tree Collapse file tree
content/cloudflare-one/identity/users Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -23,33 +23,19 @@ You can use the JWT created by Cloudflare Access to validate requests on your or
2323
2424## Manual verification
2525
26- {{<Aside >}}
27-
28- <b >Before you start</b >
29-
30- Install [ ` lokey ` ] ( https://github.com/jpf/lokey ) and [ ` jq ` ] ( https://stedolan.github.io/jq/download/ ) .
31-
32- {{</Aside >}}
33-
34- 1 . Run this command:
35-
36- ``` bash
37- curl -s https://< your team domain> /cdn-cgi/access/certs | jq .keys[0] | lokey to pem -----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01SvMv4TgFIECQgzHaRL DGVaKhRQHjgdiSOpbqhHQMdcNtBIM0HAQbrs7YS6sQCCdZC5wCvlq3xgqdU5J6k YI5OCSsIWXKkobAl6PbXHdN0bJximeiHGa3O0hMREP6RKBoI6ayNmZ3WlVGWY 6ie47KGqN69l7fPKyZvszb4GdpxE0r8gllZZwIuPjzlghXRlrkaP48ucQwo+tq PSSdDdW57TCFmy+G547W5iWZWJIeNkfVu9t6FktvCwSZ1ekum3X7IQcd0O0DWSR Aj9tzNDPkzOeSFxmQkKpWs8Qw7ZBIfLOsO3DCH6VPNhS2cqhw1AAMunh8alDKQU aQIDAQAB -----END PUBLIC KEY-----
38- ```
39-
40- If an error occurs while running ` lokey` , install the [Python six](https://pypi.python.org/pypi/six) library, and try again:
41-
42- ` ` ` sh
43- $ pip install six==1.10.0
44- ` ` `
45-
46261 . Go to [ jwt.io] ( https://jwt.io/ ) .
4727
48281 . Select the RS256 algorithm.
4929
50- 1. Paste the JWT into the field on the left.
30+ 1 . Paste the JWT into the ** Encoded** field on the left. Get the ` kid ` value of the header box on the decoded column.
31+
32+ 1 . Get your public key:
33+
34+ 1 . Go to ` https://<your team domain>/cdn-cgi/access/certs ` .
35+ 2 . Under ` public_certs ` , locate the entry with the ` kid ` value you found in Step #3 .
36+ 3 . Copy the ` cert ` value.
5137
52- 1. Enter the public key in the ** Public Key** field.
38+ 1 . In the ** Verify Signature ** box, paste the ` cert ` value into the ** Public Key** field.
5339
54401 . Ensure that the signature says ** verified** .
5541
You can’t perform that action at this time.
0 commit comments