Infrastructure/ghost: Independent technology for modern publishing, memberships, subscriptions and newsletters.

mirror of https://github.com/TryGhost/Ghost.git synced 2025-03-25 02:31:59 -05:00

Independent technology for modern publishing, memberships, subscriptions and newsletters.

blogging cms creator-economy ghost hacktoberfest headless-cms jamstack javascript journalism nodejs publishing web-application

Find a file

Naz 9756094ae2 🐛 Fixed signing key mismatching in JWT/JWKS refs https://github.com/TryGhost/Team/issues/1640 closes https://github.com/TryGhost/Members/pull/401/ refs https://forum.ghost.org/t/ghost-jwt-question-possible-bug/30210 - Without `keyid` parameter some of the clien libraries were not able to match the signin key to verify JWT - Missing `keyid` parameter allows to indicate the key used to secure JWS (as per https://www.rfc-editor.org/rfc/rfc7515#section-4.1.4) and resolves the automatic matching issue on the client. - The `kid` parameter was left in claims to avoid accidental breaking changes.	2022-05-23 18:45:08 +08:00
ghost	🐛 Fixed signing key mismatching in JWT/JWKS	2022-05-23 18:45:08 +08:00

Naz 9756094ae2 🐛 Fixed signing key mismatching in JWT/JWKS

refs https://github.com/TryGhost/Team/issues/1640
closes https://github.com/TryGhost/Members/pull/401/
refs https://forum.ghost.org/t/ghost-jwt-question-possible-bug/30210

- Without `keyid` parameter some of the clien libraries were not able to match the signin key to verify JWT
- Missing `keyid` parameter allows to indicate the key used to secure JWS (as per https://www.rfc-editor.org/rfc/rfc7515#section-4.1.4) and resolves the automatic matching issue on the client.
- The `kid` parameter was left in claims to avoid accidental breaking changes.

2022-05-23 18:45:08 +08:00

ghost

🐛 Fixed signing key mismatching in JWT/JWKS

2022-05-23 18:45:08 +08:00