Skip to content

JwtTypeValidator is case sensitive in 7.0-m3 #18092

@wuem

Description

@wuem

Describe the bug
The bug itself is really simple. Version 6.5 introduces JwtTypeValidator that is meant to replace Nimbus type validators. While making migrations to incoming Spring boot 4.0 I noticed that this validator is case sensitive and previously used Nimbus JOSEObjectTypeVerifier is not.

Expected behavior
new JwtTypeValidator should be backward compatible with JOSEObjectTypeVerifier

Those two classes are really similar but Spring native implementation uses Strings as type values when JOSEObjectTypeVerifier uses JOSEObjectType with overridden equals that is not case sensitive.

Metadata

Metadata

Assignees

Labels

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)status: duplicateA duplicate of another issuetype: bugA general bug

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions