Conrad Ludgate 4391b25d01 proxy: ignore typ and use jwt.alg rather than jwk.alg (#9215) ...

Microsoft exposes JWKs without the alg header. It's only included on the
tokens. Not a problem.

Also noticed that wrt the `typ` header:
> It will typically not be used by applications when it is already known
that the object is a JWT. This parameter is ignored by JWT
implementations; any processing of this parameter is performed by the
JWT application.

Since we know we are expecting JWTs only, I've followed the guidance and
removed the validation.

2024-10-01 10:36:49 +01:00

..

classic.rs

proxy: random changes (#8602)

2024-08-07 14:37:03 +01:00

hacks.rs

proxy: remove auth info from http conn info & fixup jwt api trait (#9047)

2024-09-19 15:09:30 +00:00

jwt.rs

proxy: ignore typ and use jwt.alg rather than jwk.alg (#9215)

2024-10-01 10:36:49 +01:00

local.rs

proxy: auth broker (#8855)

2024-09-30 20:43:45 +01:00

web.rs

proxy: check if IP is allowed during webauth flow (#9101)

2024-09-24 11:52:25 +02:00