velocitatem/cvfs
1
0
Fork 0
mirror of https://github.com/velocitatem/cvfs.git synced 2026-05-31 08:43:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

allow jwt alg from token header

Browse Source
This commit is contained in:
Daniel Rosel
2026-04-03 19:31:23 +02:00
parent e7bac3b178
commit fa215009cd
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
dlib/auth/oidc.py
View File

@@ -74,11 +74,12 @@ class OidcTokenValidator:
key = await self._get_key(header.get("kid")) key = await self._get_key(header.get("kid"))
if not key: if not key:
raise TokenValidationError("Unable to resolve signing key") raise TokenValidationError("Unable to resolve signing key")
alg = header.get("alg") or key.get("alg") or "RS256"
try: try:
claims = jwt.decode( claims = jwt.decode(
token, token,
key, key,
algorithms=[key.get("alg", "RS256")], algorithms=[alg],
audience=self.audience, audience=self.audience,
issuer=self.issuer, issuer=self.issuer,
) )