Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: switch to form3tech's fork of jwt-go #399

Merged
merged 1 commit into from
Nov 25, 2020
Merged

fix: switch to form3tech's fork of jwt-go #399

merged 1 commit into from
Nov 25, 2020

Conversation

dunglas
Copy link
Owner

@dunglas dunglas commented Nov 25, 2020

Closes #394.

@dunglas dunglas merged commit 93932fa into main Nov 25, 2020
@dunglas dunglas deleted the fix/394 branch November 25, 2020 09:33
@sagikazarmark
Copy link
Contributor

Looks like this fork has its own issues: go-kit/kit#1026 (comment)

form3tech-oss/jwt-go#5

The problem is that the token might contain an audience claim in which case the library could simply panic.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

High severity issue in github.com/dgrijalva/jwt-go
2 participants