refactor: jwt verify provide algorithm (LLC-2243)

LearningLocker · Jan 3, 2023 · a921ee2 · a921ee2
1 parent 5c88fb6
commit a921ee2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/apps/statements/service/storeStatements/postValidationSetup/checkSignedStatements.ts b/src/apps/statements/service/storeStatements/postValidationSetup/checkSignedStatements.ts
@@ -72,7 +72,7 @@ export default async (
       const publicKey = `-----BEGIN CERTIFICATE-----\n${splitDER}\n-----END CERTIFICATE-----`;
 
       try {
-        jwt.verify(token, publicKey);
+        jwt.verify(token, publicKey, { algorithms: ['none'] });
       } catch {
         throw new InvalidJws(originalStatement.id);
       }