Don't auto-generate a JWT with su: true claim if no JWT provided to Instance.request - Githubissues

pusher / pusher-platform-ruby

Sample authorizer component in Ruby

0 stars 4 forks source link

Don't auto-generate a JWT with su: true claim if no JWT provided to Instance.request #21

Closed hamchapman closed 6 years ago

hamchapman commented 6 years ago

What?

See title

Why?

Shouldn't auto-generate tokens, especially not with su: true claim

[ ] README updated if you changed the API?
[x] CHANGELOG updated if relevant?

CC @pusher/sigsdk