microshed-testing
microshed-testing copied to clipboard
Requiered "typ" header of token was missed
trafficstars
Describe the bug There is no "typ": "JWT" in header
To Reproduce Try to use RESTClient with @JwtConfig for application secured by "MP-JWT"
Expected behavior
JwtBuilder should add typ header in buildJwt method
builder.jws.setHeader("typ", "JWT");
hi @sultansoy, thanks for raising this issue. According to RFC 7519 the typ attribute is optional: https://tools.ietf.org/html/rfc7519#section-5.1
It's easy enough to add though. Is this causing an issue with an application / runtime that is requiring it?
@sultansoy is this one still relevant for you?