Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[v1][v2] Add option to disallow JSON format for JWTs #1077

Closed
lestrrat opened this issue Feb 19, 2024 · 2 comments
Closed

[v1][v2] Add option to disallow JSON format for JWTs #1077

lestrrat opened this issue Feb 19, 2024 · 2 comments
Assignees
@lestrrat

Comments

@lestrrat
Copy link
Collaborator

jwt.Parse has historically allowed Full JSON format, but RFC7519 does not.
Since we can't change behavior from already released versions, add an option to disallow parsing Full JSON format JWTs.
@lestrrat lestrrat mentioned this issue Feb 19, 2024
Merged
@lestrrat
Copy link
Collaborator Author

After briefly looking at v1, I think it may be harder to change v1 than v2. We may have to punt it for v1

@lestrrat
Copy link
Collaborator Author

Decided to punt it for v1. v3 got this through rebase.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@lestrrat lestrrat

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@lestrrat