You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. If you have not received a response for our team (apologies for the delay) and this is still a blocker, please reply with additional information or just a ping. Thank you for your contribution! 🙇♂️
using v1.6.0
Testing against a (broken) provider that only returns a single cert in
x5c
as a string.https://github.com/auth0/node-jwks-rsa/blob/master/src/JwksClient.js#L71 will succeed, because a string passes those checks.
The code should additionally check that
key.x5c
is an array.The text was updated successfully, but these errors were encountered: