Skip to content
This repository has been archived by the owner on Jan 25, 2018. It is now read-only.

We only document use of HS256, no need for others #617

Merged
merged 1 commit into from
Mar 25, 2015

Conversation

kumar303
Copy link
Contributor

No description provided.

with self.settings(SUPPORTED_JWT_ALGORITHMS=['HS256']):
res = self.post(
request_kwargs={'jwt_kwargs': {'algorithm': 'none'}})
eq_(res.status_code, 400)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we give any more feedback than this? Just a 400 seems pretty tough to debug.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

oh yeah, I forgot this is a standard JSON API response so we have a readable error code. Thanks.

@mstriemer
Copy link
Contributor

It would be nice to get a better error than just 400 but that isn't the end of the world.

r+

kumar303 added a commit that referenced this pull request Mar 25, 2015
We only document use of HS256, no need for others
@kumar303 kumar303 merged commit 04fc862 into mozilla:master Mar 25, 2015
@kumar303 kumar303 deleted the strict-jwt branch March 25, 2015 16:12
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants