supabase / supabase-swift / 34987335502

90%

push

github

fix(auth): fall back to the JWT header alg when the JWK omits one (#1348)

alg is optional in a JWK per RFC 7517, but getClaims required it and
dropped the header alg it had already parsed, so a JWKS without alg
silently fell back to a GET /user round trip instead of verifying
locally. auth-js selects the verifier from the header alg.

1 of 1 new or added line in 1 file covered. (100.0%)

10377 of 11750 relevant lines covered (88.31%)

104.57 hits per line