fix: use JWTPublicKey for ECDSA token parsing by lakhansamani · Pull Request #487 · authorizerdev/authorizer
Navigation Menu
{{ message }}
authorizerdev / authorizer Public
- Notifications You must be signed in to change notification settings
- Fork 204
Merged
fix: use JWTPublicKey for ECDSA token parsing#487
lakhansamani merged 1 commit intomainfrom
fix: use JWTPublicKey for ECDSA token parsing#487
lakhansamani merged 1 commit intomainfrom
Conversation
Copy link Copy Markdown
Contributor
lakhansamani
commented
Mar 1, 2026
lakhansamani
commented
Summary
- Fixed ECDSA (ES256/ES384/ES512) token parsing to use
JWTPublicKeyinstead ofJWTSecret - Signing correctly used
JWTPrivateKeybut parsing was incorrectly usingJWTSecret
Test plan
- Verify ECDSA token signing and parsing works correctly
- Run existing JWT tests
Fixes #476
The ParseJWTToken function incorrectly used JWTSecret instead of JWTPublicKey for ECDSA (ES256/ES384/ES512) token validation. Fixes #476
lakhansamani
merged commit
fca7aed
into
main
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment