This repository has been archived by the owner on Aug 19, 2020. It is now read-only.

alg is not required per RFC 7517 #1

Open

mattjvan opened this issue Jun 19, 2018 · 0 comments

Labels

mattjvan commented Jun 19, 2018

jwks-ecdsa/src/jwksClient.js

Line 27 in 879d720

key.alg &&

jwksClient requires 'alg' to be specified, but per RFC 7517 section 4.4 (https://tools.ietf.org/html/rfc7517#section-4.4):

... The "alg" value is a case-sensitive ASCII string. Use of this member is OPTIONAL.

mariusespejo added the enhancement label

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.