From 6c15be1c8ad5c9e78871f493c26fc3f185d76091 Mon Sep 17 00:00:00 2001 From: Trong Huu Nguyen Date: Mon, 2 Dec 2024 11:47:40 +0100 Subject: [PATCH] auth/texas: clarify validation of claims --- docs/auth/partials/validate.md | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/docs/auth/partials/validate.md b/docs/auth/partials/validate.md index 6e0c6134..f3039d2a 100644 --- a/docs/auth/partials/validate.md +++ b/docs/auth/partials/validate.md @@ -41,7 +41,7 @@ It always contains the `active` field, which is a boolean value that indicates w ##### Success response -If the token is valid, the response will also contain all the token's claims: +If the token is valid, the response will additionally contain **all** the token's claims: ```json title="Valid token" { @@ -52,9 +52,14 @@ If the token is valid, the response will also contain all the token's claims: } ``` -Texas validates the standard claims. -[Other claims](<>) are not validated. -Your application must validate these claims according to your own requirements. +Claims are copied verbatim from the token to the response. + +!!! question "Which claims are validated by Texas?" + + Texas only validates the token's signature and its [standard claims](../../explanations/README.md#claims-validation). + + [Other claims](<>) are included in the response, but are not validated by Texas. + Your application must validate these other claims according to your own requirements. ##### Error response