Join GitHub today
GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together.Sign up
The library does not check the situation if signature algorithm is defined but no signature is provided #2
Please doublecheck this is a valid issue. According to JWS §4.1.1 "alg" Header Parameter MUST be present and MUST be understood and processed by implementations.
In my opinion that means that if "alg" is not "none", then signature must be present and verified. Attached