Skip to content

Commit 6900de0

Browse files
committed
Fix for JWT bug
1 parent dc9ba7d commit 6900de0

File tree

1 file changed

+8
-2
lines changed

1 file changed

+8
-2
lines changed

src/Tqdev/PhpCrudApi/Middleware/JwtAuthMiddleware.php

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -38,8 +38,14 @@ private function getVerifiedClaims(String $token, int $time, int $leeway, int $t
3838
}
3939
foreach ($requirements as $field => $values) {
4040
if (!empty($values)) {
41-
if (!isset($claims[$field]) || !in_array($claims[$field], $values)) {
42-
return array();
41+
if ($field == 'alg') {
42+
if (!isset($header[$field]) || !in_array($header[$field], $values)) {
43+
return array();
44+
}
45+
} else {
46+
if (!isset($claims[$field]) || !in_array($claims[$field], $values)) {
47+
return array();
48+
}
4349
}
4450
}
4551
}

0 commit comments

Comments
 (0)