The client_assertion JWT kid is invalid.

[michaelmisshore]

When configuring an OktaClient via privateKey, if the application you are targeting has multiple JWKs, the following error occurs:

{'message': "HTTP 401 {'error': 'invalid_client', 'error_description': 'The client_assertion JWT kid is invalid.'}"}

This works fine if the application only has one JWK. The issue is that the signed JWT does not contain the kid.

Potential fix: michaelmisshore@3e842ef.

[bretterer]

Resolved in 2.9.0