search

latchset / jwcrypto

Implements JWK,JWS,JWE specifications using python-cryptography
GNU Lesser General Public License v3.0
432 stars 119 forks source link

Add more heuristics for backwards JWT compat #301

Closed simo5 closed 2 years ago

simo5 commented 2 years ago

These additional heuristics help in case the calling application was correctly calssifying key usage, as this is another valid hitn of what the application intended. Invalid key usage would already cause failure, so this does not affect the countermeasures introduced but can avoid issues in older applications.

simo5 commented 2 years ago

This has been independently tested to resolve issues in FreeIPA where the change caused a failure.