search

xmidt-org / themis

This is a JWT Issuer for the Xmidt service
Apache License 2.0
4 stars 10 forks source link

Claims should be case sensitive #60

Closed kristinapathak closed 3 years ago

kristinapathak commented 4 years ago

Claims placed in configuration are being modified to be all lowercase.

Example of configuration:

      claims:
        aB:
          value: 
            aP: ["meep"]

Resulting JWT snippet:

  "ab": {
    "ap": [
      "meep"
    ],

according to RFC, these things should be case sensitive: https://tools.ietf.org/html/rfc7519#section-10.1.1

kristinapathak commented 3 years ago

fixed in https://github.com/xmidt-org/themis/pull/63.