Skip to content

fix(google-auth): treat alg/key type mismatch in JWT verification as invalid signature - #18447

Open
dedsec-terminal wants to merge 1 commit into
googleapis:mainfrom
dedsec-terminal:fix/jwt-alg-key-mismatch-builtin-exception
Open

dedsec-terminal wants to merge 1 commit into
googleapis:mainfrom
dedsec-terminal:fix/jwt-alg-key-mismatch-builtin-exception

fix(auth): return MalformedError when token alg key types mismatch

0b2aadd
Select commit
Loading
Failed to load commit list.
Google CLA / cla/google succeeded Sep 23, 2026 in 1s

✅ All contributors are covered under a CLA with Google

See https://cla.developers.google.com/ for more info about Google's Contributor License Agreement (CLA).

ℹ️ Googlers: Go here to view more details and manage scans for this pull request.

Details

The following contributors were found for this pull request:

✅ 0b2aadd Author: @dedsec-terminal <dedsec-terminal​@users.noreply.github.com>

(Only the first commit for a unique contributor is listed.)