SA jwt can not unmarshal .exp field

[aldiserg]

Trying to use SA jwt via cli version 0.21.0-beta

pomerium-cli k8s exec-credential --service-account-file jwt https://api.test.ru

Getting:

ERR exit error="json: cannot unmarshal number 1.672319325e+09 into Go struct field .exp of type int64"

decrypted jwt (second part)

{
  "aud": "httpbin.test.ru",
  "email": "valid email",
  "exp": 1672319325,
  "groups": [],
...

[calebdoxsey]

I made a simple test and I cannot reproduce the issue. json is able to unmarshal that time.

	rnd := rand.New(rand.NewSource(1))

	key, err := ecdsa.GenerateKey(elliptic.P256(), rnd)
	require.NoError(t, err)

	signer, err := jose.NewSigner(jose.SigningKey{Algorithm: jose.ES256, Key: key}, nil)
	require.NoError(t, err)

	jws, err := signer.Sign([]byte(`{"exp": 1672319325}`))
	require.NoError(t, err)

	sig, err := jws.CompactSerialize()
	require.NoError(t, err)

	cred, err := parseToken(sig)
	if assert.NoError(t, err) {
		assert.NotNil(t, cred)
	}

I'm not sure where the error is occurring.

[kenjenkins]

This should be fixed in Pomerium v0.22.3 or later (see pomerium/pomerium#4149).