option to require some integrity protection in JWT validation

Issue #121 closed
Brian Campbell repo owner created an issue

Add an option to JwtConsumerBuilder / JwtConsumer to require that the JWT have some integrity protection, either a signature/MAC JWS or a JWE using a symmetric key management algorithm.

This would be useful in cases where one wants to accept JWTs that could be potentially signed and/or encrypted but want to ensure that some kind of integrity protection is in place.

Comments (3)

  1. Brian Campbell reporter

    e4828d7 addressed this with an option on JwtConsumerBuilder/JwtConsumer to require that the JWT have some integrity protection, either a signature/MAC JWS or a JWE using a symmetric key management algorithm.

  2. Log in to comment