IMPORTANT: This is a major release with backward compatibility breaking changes.
iss
from the incoming JWT and use it to lookup the appropriate algorithm from the middleware configuration to use for decoding.
(Note that the iss claim is not "trusted" until signature verification has succeeded.)To support multiple issuers, the format of configuration has changed so that there is a separate configuration per issuer. See the README for an example.
issuer optional algorithm field has been removed. (Issuer check is now implicit based on the lookup of issuer in the
configuration.)Can you improve this documentation?Edit on GitHub
cljdoc builds & hosts documentation for Clojure/Script libraries
| Ctrl+k | Jump to recent docs |
| ← | Move to previous article |
| → | Move to next article |
| Ctrl+/ | Jump to the search field |