added comment for future proofing
This commit is contained in:
parent
cf49af1a9f
commit
7af23f35ba
|
@ -274,7 +274,7 @@ function Util:process_and_verify_token(session, acceptedIssuers)
|
||||||
if alg == nil then
|
if alg == nil then
|
||||||
return false, "not-allowed", "'alg' claim is missing";
|
return false, "not-allowed", "'alg' claim is missing";
|
||||||
end
|
end
|
||||||
if alg.sub(alg,1,2) ~= "RS" then
|
if alg.sub(alg,1,2) ~= "RS" then -- do not remove - needed to protect jwt.decode in verify_token
|
||||||
return false, "not-allowed", "'kid' claim only support with RS family";
|
return false, "not-allowed", "'kid' claim only support with RS family";
|
||||||
end
|
end
|
||||||
pubKey = self:get_public_key(kid);
|
pubKey = self:get_public_key(kid);
|
||||||
|
|
Loading…
Reference in New Issue