pallets-eco / flask-jwt

JWT (JSON Web Tokens) for Flask applications
MIT License
564 stars 178 forks source link

Claims are not validated #98

Open vimalloc opened 8 years ago

vimalloc commented 8 years ago

Issue is here: https://github.com/mattupstate/flask-jwt/blob/master/flask_jwt/__init__.py#L78-L91

Setting the require and verify in the options does not actually make pyjwt verify those claims, they are simply ignored by pyjwt. If you wanted to do those verifications, you would need to decode the token first, and manually check if the keys are present

ElChemso commented 7 years ago

This should either be implemented or the description of it removed from the documentation.