eclipse-vertx / vertx-auth

Apache License 2.0
162 stars 154 forks source link

Don't call IdP on bad JWT #629

Closed pmlopes closed 1 year ago

pmlopes commented 1 year ago

Motivation:

validation of raw tokens falls back to opaque when jwt issues happen. If the issues are valid, like signature mismatch or audience, there is no need to proceed as opaque saving a few network roundtrips