jwt.decode: Set algorithms to all when None

See mpdavis#346
danigm · May 2, 2024 · 4638c12 · 4638c12
1 parent 34bd82c
commit 4638c12
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/jose/jwt.py b/jose/jwt.py
@@ -141,6 +141,9 @@ def decode(token, key, algorithms=None, options=None, audience=None, issuer=None
 
     verify_signature = defaults.get("verify_signature", True)
 
+    if algorithms is None:
+        algorithms = ALGORITHMS.ALL
+
     try:
         payload = jws.verify(token, key, algorithms, verify=verify_signature)
     except JWSError as e: