Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Support application/jwt in userinfo endpoint #521

Draft
wants to merge 2 commits into
base: main
Choose a base branch
from
Draft

Support application/jwt in userinfo endpoint #521

wants to merge 2 commits into from

Commits on Feb 14, 2024

  1. ♻️ [mozilla#517] Extract JWS/JWK verification and decoding into gener… 

    …ic utility

This allows us to re-use the verification functionality for
both the access token processing and userinfo response
data processing without duplicating the low-level
implementation.

Notable changes:

* the 'none' algorithm is blocked as this is a common
  exploit vector
* added some more documentation about the parameters
* added type hints to document expected parameter types
* did some slight refactoring/restructuring to make the
  code type-safe
    @sergei-maertens
    sergei-maertens committed Feb 14, 2024
    Configuration menu
    Copy the full SHA
    a8cd537 View commit details
    Browse the repository at this point in the history

  2. ✨ [mozilla#517] Implement content-type negotation in userinfo endpoint 

    TODO: address broken tests
TODO: add new tests
    @sergei-maertens
    sergei-maertens committed Feb 14, 2024
    Configuration menu
    Copy the full SHA
    6bfe752 View commit details
    Browse the repository at this point in the history