element-hq / element-hq/matrix-authentication-service
Verify the claims from JWT submitted by clients in auth
Open
T-Defect
- Dominant language
- Rust
- Stars
- 280
- Forks
- 111
- Avg merge
- 3d 1h
- Merged PRs (30d)
- 25
Description
*This issue was originally created by [**@sandhose**](https://github.com/sandhose) at .*
It seems like we're not validating anything form the JWTs sent for client auth.
What should be checked is defined in RFC7523: https://www.rfc-editor.org/rfc/rfc7523#section-3
Contributor guide
Assessment
This issue has not been assessed yet.