New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Some jwt authentication fixes #51

Merged

ccrisan merged 2 commits into colibris-framework:master from AMecea:jwt-auth-1

Oct 26, 2020

Member

AMecea commented Oct 26, 2020

Restrict JWT algorithm when verifying to HS256
Use identity_field from account when building the token instead of id (str(account) == id)

AMecea added 2 commits

October 26, 2020 15:44


          Use identity_field when building the jwt


          Constraint jwt verify to a list of algorithms

36aa6aa

Member

ccrisan commented Oct 26, 2020

Most certainly some potentially pain-inducing oversights :) Thanks!

ccrisan merged commit b7aa0e7 into colibris-framework:master

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment