Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Downgrade JJWT library version #796

Merged
merged 2 commits into from Mar 1, 2024
Merged

Downgrade JJWT library version #796

merged 2 commits into from Mar 1, 2024

Conversation

vladokrsymphony
Copy link
Contributor

@vladokrsymphony vladokrsymphony commented Feb 28, 2024

Description

We are downgrading the JJWT library to 0.9.1 to prevent JWT validation failure.
The latest JJWT library is enforcing the "sub" claim to be "string" data format (which is according to the RFC standard). This check makes the validation of the extension application JWT to fail because the "sub" claim is of long data type, equal to the Symphony user id.
This check is not enforced in the JJWT 0.9.1 library version thus we are using that version.

Additionally:

Dependencies

none

Checklist

  • Referenced an issue in the PR title or description
  • Filled properly the description and dependencies, if any
  • Unit/Integration tests updated or added
  • Javadoc added or updated
  • Updated the documentation in docs folder

@vladokrsymphony vladokrsymphony merged commit 4b6f66a into main Mar 1, 2024
6 checks passed
@vladokrsymphony vladokrsymphony deleted the fix-jjwt-library branch March 1, 2024 07:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants