supabase / storage / 30938364940 / 1

81%

master: 81%

push

github

fix(auth): pass alg to importJWK for jose v6 compatibility with Auth0… (#1097)

* fix(auth): pass alg to importJWK for jose v6 compatibility with Auth0 JWKs

* fix(auth): reject JWKs whose alg field conflicts with JWT header alg

* test(auth): add coverage for asymmetric JWKs without alg and alg mismatch rejection

* chore: fix lint formatting in jwt.test.ts

* reject hmac jwt if the alg does not match

* fix: check for compatibility in all jwks and handle empty alg

Signed-off-by: ferhat elmas <elmas.ferhat@gmail.com>

---------

Signed-off-by: ferhat elmas <elmas.ferhat@gmail.com>
Co-authored-by: Lenny <lenny@itslennysfault.com>
Co-authored-by: ferhat elmas <elmas.ferhat@gmail.com>

3718 of 6914 branches covered (53.77%)

Branch coverage included in aggregate %.

7709 of 11790 relevant lines covered (65.39%)

384.11 hits per line