From 55afa99efa8b7720810082f9219b4de5cf2d943a Mon Sep 17 00:00:00 2001
From: Evan Jarrett <evan@evanjarrett.com>
Date: Wed, 29 Oct 2025 12:21:50 -0500
Subject: [PATCH] jwks

---
 cmd/appview/serve.go | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/cmd/appview/serve.go b/cmd/appview/serve.go
index e983109..890a2ab 100644
--- a/cmd/appview/serve.go
+++ b/cmd/appview/serve.go
@@ -385,6 +385,14 @@ func serveRegistry(cmd *cobra.Command, args []string) error {
 		config := oauthApp.GetConfig()
 		metadata := config.ClientMetadata()
 
+		// For confidential clients, ensure JWKS is included
+		// The indigo library should populate this automatically, but we explicitly set it here
+		// to be defensive and ensure it's always present for confidential clients
+		if config.IsConfidential() && metadata.JWKS == nil {
+			jwks := config.PublicJWKS()
+			metadata.JWKS = &jwks
+		}
+
 		// Convert indigo's metadata to map so we can add custom fields
 		metadataBytes, err := json.Marshal(metadata)
 		if err != nil {