Is guardian relying on JWT's fixed side ?

ueberauth / guardian

Elixir Authentication

MIT License

3.4k stars 381 forks source link

Is guardian relying on JWT's fixed side ? #689

Closed phtrivier closed 2 years ago

phtrivier commented 2 years ago

I'm using ueberauth and guardian to authenticate with Auth0. Recently they annonced that they might change the size of the generated tokens and access code.

https://support.auth0.com/notifications/61df51092bf8f3000b5bfd48

Could this have any impact when using ueberauth ? Are there specific things to check ?

yordis commented 2 years ago

Screen Shot 2022-03-26 at 11 39 06 AM

@phtrivier I can't read the shared link.

phtrivier commented 2 years ago

Sorry about that. The issue was a change of the Access Tokens and/or Authorization Codes issues by Auth0 ; they used to isse fixed-size opaque Access Token, and are migrating to variable size.

I was able to do some tests and get help from the support team, so we can close this.