MicroShed / MicroShed/microshed-testing
Requiered "typ" header of token was missed
Open
is:bug
- Dominant language
- Java
- Stars
- 68
- Forks
- 25
- Avg merge
- 1d 21h
- Merged PRs (30d)
- 6
Description
**Describe the bug**
There is no "typ": "JWT" in header
**To Reproduce**
Try to use RESTClient with @JwtConfig for application secured by "MP-JWT"
**Expected behavior**
JwtBuilder should add typ header in buildJwt method
`builder.jws.setHeader("typ", "JWT");`
Contributor guide
Research direction
Locate JwtBuilder.buildJwt and inspect how the JWS header is assembled. Reproduce the RESTClient case with an application secured by MP-JWT, then verify that generated tokens include the typ header with value JWT.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 45/100