supabase / storage / 30938364940

81%

push

github

fix(auth): pass alg to importJWK for jose v6 compatibility with Auth0… (#1097)

* fix(auth): pass alg to importJWK for jose v6 compatibility with Auth0 JWKs

* fix(auth): reject JWKs whose alg field conflicts with JWT header alg

* test(auth): add coverage for asymmetric JWKs without alg and alg mismatch rejection

* chore: fix lint formatting in jwt.test.ts

* reject hmac jwt if the alg does not match

* fix: check for compatibility in all jwks and handle empty alg

Signed-off-by: ferhat elmas <elmas.ferhat@gmail.com>

---------

Signed-off-by: ferhat elmas <elmas.ferhat@gmail.com>
Co-authored-by: Lenny <lenny@itslennysfault.com>
Co-authored-by: ferhat elmas <elmas.ferhat@gmail.com>

5632 of 7518 branches covered (74.91%)

Branch coverage included in aggregate %.

11 of 11 new or added lines in 1 file covered. (100.0%)

10619 of 12661 relevant lines covered (83.87%)

433.67 hits per line