microshed-testing icon indicating copy to clipboard operation
microshed-testing copied to clipboard

Requiered "typ" header of token was missed

Open sultansoy opened this issue 5 years ago • 2 comments
trafficstars

Describe the bug There is no "typ": "JWT" in header

To Reproduce Try to use RESTClient with @JwtConfig for application secured by "MP-JWT"

Expected behavior JwtBuilder should add typ header in buildJwt method builder.jws.setHeader("typ", "JWT");

sultansoy avatar Jun 02 '20 07:06 sultansoy

hi @sultansoy, thanks for raising this issue. According to RFC 7519 the typ attribute is optional: https://tools.ietf.org/html/rfc7519#section-5.1

It's easy enough to add though. Is this causing an issue with an application / runtime that is requiring it?

aguibert avatar Jun 05 '20 04:06 aguibert

@sultansoy is this one still relevant for you?

appiepollo14 avatar Jan 07 '24 12:01 appiepollo14