Oauth2 JWT Token Generator previously used Base64 encoding.  But now it has
been changed to Base64Url encoding.

When signature algorithm is NONE, JWT header was

{"typ":"JWT"}

Since  "alg" (Algorithm) Header Parameter is mandatory according to the
specification [1].. Now it has been changed to

{"typ":"JWT","alg":"NONE"}

Public JIRA                  : https://wso2.org/jira/browse/IDENTITY-2617

[1].
http://tools.ietf.org/html/draft-ietf-jose-json-web-signature-31#section-4.1

-- 
Prasad Tissera
Software Engineer.
Mobile : +94777223444
_______________________________________________
Architecture mailing list
[email protected]
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

Reply via email to