featurehelp wanted
Repository metrics
- Stars
- (34,843 stars)
- PR merge metrics
- (平均マージ 8d 5h) (30d で 41 merged PRs)
説明
As detailed here, JWT verification functions should require specifying the algorithm that should have been used, in order to prevent an attacker from changing the algorithm to a symmetric algorithm from an asymmetric one and using the public key to sign the token. Probably low priority for this particular app, but it would be good to at least have the option.