SkyLothar / lua-resty-jwt

JWT For The Great Openresty
Apache License 2.0
513 stars 179 forks source link

Require alg parameter when verifying. #78

Open ruifung opened 6 years ago

ruifung commented 6 years ago

In accordance with https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/ Most, if not all JWT libraries require specifying the verification algorithm when verifying.