Closed rassie closed 4 years ago
first, I use identity claims because that package I use to make jwt its doesn't support to add sub claims which is refer to pyjwt, and the type claims its identify incoming token its access token or refresh token in some cases you only want to accept refresh token to your endpoint.
after I did research about claims information, I decide to change identity claim to standard claim using 'sub', thanks for your information 🙏
It seems
fastapi-jwt-auth
(current git HEAD) adds custom claimsidentity
andtype
to the tokens it generates and also expects any incoming tokens to contain those claims. This is not the case if tokens are generated by a third-party provider. Is most casesidentity
can be replaced via standard claimsub
, whiletype
is mostly available viatyp
(which might not be standard).Could you share the reasoning behind these claims?