Closed olitha closed 2 years ago
Wow, I literally implemented this last night with the intention to open an issue and submit a PR this morning. However, I did it differently and I think more correctly. I'm not sure how your PR didn't cause lots of tests to break either 🤔 I will submit my PR shortly after I rebase with your update.
@Keats Do you like to close out these issues once a release is done, or after code is in next
? I'll quickly take the opportunity to say thanks for your contributions to the community as well!
Forgot to reply! Thanks for the kinds words, I'll close all relevant issues on release - probably this weekend if nothing else pops up.
The x5c Header contains a certificate chain as base64 encoded DER certificates and can be used outside the jsonwebtoken lib to get the public key for signature verification. Additionally the certificate chain can be verified by the application.
Can we add the x5c header? Only to make it available to applications?