Skip to content
This repository has been archived by the owner on Aug 10, 2021. It is now read-only.

Fix sec vuln with list of claims #2

Closed

Conversation

Waterdrips
Copy link

Fix for Security Vuln in v 3.2.0 with invalid check on "aud" claim when claim is a list of strings (RFC states it should be list of strings, or in special case a String only)

Signed-off-by: Alistair Hey alistair@heyal.co.uk

leo-form3
leo-form3 previously approved these changes Sep 14, 2020
map_claims.go Outdated Show resolved Hide resolved
map_claims.go Outdated Show resolved Hide resolved
owenrumney
owenrumney previously approved these changes Sep 14, 2020
Copy link

@owenrumney owenrumney left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

rkorkosz
rkorkosz previously approved these changes Sep 14, 2020
@leo-form3
Copy link

Travis is having issues building the branch. Is it maybe because you are creating a PR from your private repo?

Waterdrips and others added 4 commits September 14, 2020 15:52
Signed-off-by: Alistair Hey <alistair.hey@form3.tech>
Signed-off-by: Alistair Hey <alistair.hey@form3.tech>
Signed-off-by: Alistair Hey <alistair.hey@form3.tech>
Signed-off-by: Alistair Hey <alistair.hey@form3.tech>
@Waterdrips
Copy link
Author

close and re-open to try and get rid of duplicate travis PR checks

@Waterdrips
Copy link
Author

going to re-open a new pr to try and fix the duplicate checks

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants